The Rhetoric of Misdirection in Corporate Privacy-Policy Statements
http://www.leaonline.com/doi/abs/10.1207/s15427625tcq1402_5
  access restricted (by the publisher) to members/subscribers/customers only
  peer-reviewed

Markel, Mike
Technical Communication Quarterly
2005

Abstract:

U.S. businesses wish to continue to profit by collecting personal information from their website visitors, yet they fear that the practice both alienates visitors and exposes them both to legal problems from U.S. authorities and business sanctions from data-privacy authorities in Europe and Canada. This dilemma is reflected in the typical corporate privacy-policy statement, which is full of misleading and deceptive rhetoric intended to cover up the gap between the company's privacy policy and the image it wishes to project.