Privacy Protection: Not Just Technology

P3P is a good technological base
Existing or new legislation may be needed to handle
- misrepresenting privacy practices
- refusal to state privacy practices
Enforcement requires auditing