For businesses, is there an obligation in the United States to do anything more than simply have a privacy policy? The answer is not much of an obligation at all. Put another way, is it simply a question of disclosure – so long as a business tells users what it intends to do with their [...]