3 ms·

I'm not sure I understand what you're saying here. The only contract with the customer is the privacy policy. The privacy policy is just a promise from a site

I'm not sure I understand what you're saying here. The only contract with the customer is the privacy policy. The privacy policy is just a promise from a site to abide by certain rules. In the case that there is not a privacy policy, then whatever you tell that site can and will be used against you. From tracking cookies to the most sensitive of files, if you are providing information to a site then you have to assume that it will be used in any way the company sees fit unless they promise otherwise. Ethically there may be different obligations, but to say that there is some implicit "contract with the customer" is simply not the case.

sunir 15y ago
Since 1890 in the United States, the tort law has had concepts of invasion of privacy and breach of trust. Further on a state by state level there may be laws, such as COPPA 2003 in California, which required a privacy policy to be published. Canada and the EU have even more protective laws if you trade there. I feel it is safer and more realistic to presume the first paragraph I wrote is the case and cover yourself with a privacy policy if you want to do otherwise as I mentioned. As always, ask a lawyer if you want professional advice.