“I support safeguarding users' personally identifiable information and sensitive data like health or financial records. I also believe the government has a responsibility to punish deceptive and unfair practices that defy reasonable expectations about consumers' privacy.”