We don't think users reasonably can be expected to examine cookie files on their hard disks to track cookies usage. These services should provide clear and meaningful designations for privacy practices. They should also be backed up with regular auditing. We also have doubts about proposed techniques, such as P3, that require users to disclose privacy preferences. We think that good privacy policies should provide meaningful information for users about web site practices and not require users to disclose personal information.
Many users are also likely to consider their privacy preferences to be, well, private.
We suspect that one of the simplest and most effective solutions to on-line privacy is to continue the practice of anonymity. When personally identifiable information is collected, web sites should develop clear privacy policies. Strong privacy standards provide assurance that personal information will not be misused, and should encourage the development of on-line commerce. We also believe it is matter of basic fairness to inform web users when personal information is being collected and how it will be used. Web sites should make available a privacy policy that is easy to find.