P3P wasn't great. It's pretty hard to reduce the nuance of how you're proposing to use data down to a handful of fields that will be automatically processed.

I remember spending a silly amount of time trying to come up with a P3P policy that was both accurate and also didn't break sign-on for a single app that used multiple domains.