What is the legal significance of a website’s privacy policy?
That question lingers when reviewing such policies for legal compliance and for consistency with a company’s actual practices. Problem is, lawsuits involving claims of breaches of privacy policies have failed even in cases of clear and egregious violations by the service provider, where there was an absence of a showing of actual damages.
Eric Goldman cites a number of cases in his blog, including a prominent class action in 2005 against Jet Blue Airlines for voluntarily turning over passenger names to a government contractor, in clear violation of the airline’s stated privacy policy. Policies commonly permit the service provider to disclose information in response to a government demand. Yet, Jet Blue won dismissal despite any such disclosure right in its policy. Continue reading