Let's put it this way: I've read a whole lot of privacy policies over the last month and, except for one law firm, none of them even mention e-mail. If I was in

Let's put it this way: I've read a whole lot of privacy policies over the last month and, except for one law firm, none of them even mention e-mail. If I was in the questionable business of suing people for this, I'd have a lot to do. E-mail can contain a whole lot of PII and almost nobody gives two flying MIME headers about safeguarding it.