The proposed FTC order would also require the company to limit the data it can collect and offer users access to data and multifactor authentication, the commission said in a statement.

(Writing by Katharine Jackson; editing by Susan Heavey)