Legislation should give these policies some teeth with strict penalties for violating them. The legislation should provide that, notwithstanding any agreement to the contrary, all privacy policies require both parties express consent to modify. This would prevent companies from changing their policies to allow them to abuse privacy trusts and protect consumers. Some types of companies should have a higher duty at law to protect privacy such as banks, insurance companies, computer operating system makers, medical providers, ISPs, and telephone companies. Other companies should not automatically be required to provide such strict privacy protection as granting personal information to them is entirely optional.
Information collected by a user's visit to a website is a communication with that website.
As a result of that communication, the website's owner should be allowed to do whatever he or she wishes with the collected date. To do otherwise would be an unjustified restriction on freedom of expression.