Giving notice: why privacy policies and security breach notifications aren't enough

Anecdotal evidence suggests that although consumers say they want companies to post privacy policies and make security breach disclosures, these notices are not actually having much of an effect on consumers. A number of further steps may be needed to realize the potential of transparency to improve the privacy and security of personal information. Companies are urged to go beyond notices and actually improve their privacy and security practices so that consumers have meaningful privacy choices and personal information is adequately protected.