“There isn’t a clear federal law saying: ‘Don’t do this,’” Justin Brookman, Consumer Reports’ director, said.