Staff paper on injuries consumers may suffer from privacy and security incidents (Federal Trade Commission)