From your article:
"However, we believe that the duplicative litigation likely to result from extending a private right of action would not be justified by any reasonably expected incremental benefits to privacy enforcement."

This statement appears to imply that the end user does not and should not have a "private right of action."

With all due respect, I believe that this is overstepping and is an attempt to strip the end user or "private individuals" of their innate right to provision their devices with their own protections and severely limit the end users personal rights to control their data and their use of the internet. Such actions that take away the rights of individuals must not be allowed. Regulation of commercial and medical data handling are fine if they do what they say they do, with full transparency. Any tampering with the end users right to private actions is wrong. Your company and any others have the right to use the internet, but have no right whatsoever to act as though they own the internet and have any right to control how I or any other individual protects their personal access to the internet. Any action that changes my free and unfettered access to the internet is totally out of line.