Which of the following statements is not true?

Question $60$ options:

A$)$

The Federal Trade Commission has asserted that it has authority over corporations' data security practices.

B$)$

The Patriot Act broadly expanded law enforcement's investigative and surveillance powers.

C$)$

A majority of states require companies that maintain personal data on their residents to publicly disclose when a security breach affecting those residents has occurred.

D$)$

The Cybersecurity Information Sharing Act was strongly supported by most large technology companies and privacy advocates.