Have each member of your team access ten different Web sites and summarize their findings in terms of the existence of data privacy policy statements: Did the site have such a policy? Was it easy to find? Was it complete and easy to understand? Did you find any sites using the P3P standard or ICRA rating method?