as long as the company has a privacy policy and can be held accountable Is there any evidence that privacy policies 1) are actually followed and 2) enable any

as long as the company has a privacy policy and can be held accountable Is there any evidence that privacy policies 1) are actually followed and 2) enable any accountability whatsoever and 3) are anything other than a meaningless token gesture?