> I mean anyone can write anything into a privacy policy and who will enforce they are sticking to them really?

Dunno, but a "decent" chunk of my time went into vetting our privacy policy for my company because it is something we could be sued over.

So at least lawyers are taking it very seriously.