Funny, I had to take a two hour mandatory company privacy training course today and the gist of it was the company could only use personal information customers

Funny, I had to take a two hour mandatory company privacy training course today and the gist of it was the company could only use personal information customers allowed for the purpose it was intended to be used for. The personal info can't be used for anything else other than what the customer agreed to. When the information is no longer required or whatever it was used for is finished the information has to be securely destroyed, until that point it has to be stored and guarded as securely as is possible. Anyway after all that they proudly said we have a TRUSTe rating and showed other sites which also have it one of which is Facebook. Something seems wrong with that picture.