Law Commons^™

Privacy Policy Indeterminacy, Christopher G. Bradley

Connecticut Law Review

Despite being subjected to decades of sharp criticism, privacy policies published by companies remain a linchpin of privacy regulation. Representations in these policies provide the main measure against which consumer privacy can be judged. Policies are rarely read by consumers. Instead, these policies are interpreted by company decision makers tasked with interpreting whether a proposed course of action is consistent with stated policies as well as underlying privacy law. To be effective, policies must constrain use of consumer data even when they are given a company-friendly reading.

Experimental evidence on the interpretation of privacy policies provides no grounds for encouragement …