In a few fairly uncomplicated businesses, sure. For everyone else, there's a reason why the privacy professionals listserv I'm on is a constant debate about vagueness in the law.