It would seem to me that P3P could legally be just as enforceable as a written privacy policy.
It would only take one lawsuit to prove it.
(And yes, I bet a lot of sites would break if they made their P3P policy actually match what they do with the information they collect. I think most developers just cut & paste the P3P values they find via a websearch without thinking about it)
It would only take one lawsuit to prove it.
(And yes, I bet a lot of sites would break if they made their P3P policy actually match what they do with the information they collect. I think most developers just cut & paste the P3P values they find via a websearch without thinking about it)