In 1995 the European Union (EU) introduced the Data Protection Directive[REF] for its member states.
In many cases, the FTC enforces the terms of privacy policies as promises made to consumers using the authority granted by Section 5 of the FTC Act which prohibits unfair or deceptive marketing practices [REF].