Your privacy and security policies could be deemed to be unfair and deceptive, especially if there is a data breach.