For the USA, that's not always true: https://www.swlaw.com/blog/data-security/2015/03/12/why-you-need-a-privacy-policy-part-2-avoiding-three-common-fumbles/#:~

For the USA, that's not always true: https://www.swlaw.com/blog/data-security/2015/03/12/why-you-need-a-privacy-policy-part-2-avoiding-three-common-fumbles/#:~:text=There%20is%20no%20general%20federal,that%20can%20lead%20to%20liability https://www.swlaw.com/blog/data-security/2015/03/12/why-you-.... But I know Audacity has a sizable European userbase, too.