In reply to John Dee.

There are a few states that do require privacy policies and the FTC has been engaged in privacy enforcement under its Section 5 authority for some time. There are also three bills in Congress to create privacy requirements in the US. It's probably not something you can avoid for long.