Re: No surprise there
I remember an internal corporate presentation where the expert said "your privacy policy exists to protect yourself from lawsuits". The advice was to never explicitly state you would never do X, because that is how you paint yourself in a corner and expose yourself to lawsuits. Instead, policies should give example of what you would do, and leave it open-ended.
Which is actually pretty reasonable, considering people who don't care about privacy don't read anything, and people who care don't trust anything anyway. The actual text of policies is only read by lawyers preparing a lawsuit or defending against one...
Biting the hand that feeds IT
