Now on to the three things every policy should have (but often don’t):
Email Contact for Complaints. I firmly believe that many lawsuits against businesses come about because people either feel like they have been offended and/or cannot contact the offending business. Indeed, good customer service can often be better than effective legal planning for avoiding lawsuits. When it comes to liability relating to your privacy practices, a dedicated email address for receiving and resolving complaints can be a very effective safety valve that can allow you to address them before they blow up into a lawsuit or social media crisis.
How about you? What do you think privacy policies should have but often don’t?