Ian Reay Scott Dick James Miller A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations. 2009 3 TWEB 2 http://doi.acm.org/10.1145/1513876.1513878 db/journals/tweb/tweb3.html#ReayDM09