Why do they need to change anything? As far as I know a privacy policy has zero legal weight, that is, a company can put anything it wants into the privacy pol

Why do they need to change anything? As far as I know a privacy policy has zero legal weight, that is, a company can put anything it wants into the privacy policy, it has no effect on what is actually done.