The kind of privacy policy required for websites depends on the type of website and the data that is collected from users. For example, a website that collects personal information from children under the age of 13 will need to comply with the Children's Online Privacy Protection Act (COPPA). An eCommerce website that collects credit card information will need to comply with the Payment Card Industry Data Security Standard (PCI DSS).