> If you have one, the FTC can come after you for violation of said privacy policy. Fines can result. > If you don't have one, FTC has nothing. Surely this is

> If you have one, the FTC can come after you for violation of said privacy policy. Fines can result. > If you don't have one, FTC has nothing. Surely this is in some sense as it should be? If a company has no privacy policy, then it explicitly offers me no guarantees about how it treats my data, and I can do business with it (or not) accordingly. However, if a company has a privacy policy, then I should be able to rely on it; it shouldn't be just feel-good boilerplate.