Compliance with privacy law is not a good indicator of respect for users' privacy when you're in a position to nudge privacy legislation to limit its impact on you.