Thanks.
Actually, I did some research that was funded by the Privacy Commissioner's office. The idea was to take kids to the privacy policies on a number of sites they frequented to see if they could understand them.
My research assistant is a 24-year-old. She's a university graduate, and she is working on a graduate degree. She called me up to ask if I could help her to understand what a privacy policy said. It took me about a day and a half, and I'm a lawyer. There were 17 links to 17 different sites. The language was contradictory; information was missing. It was a phenomenal experience. When kids say these things are really hard to understand, these really are hard to understand.
We took this to kids, and they came up with a set of strategies for plain language policies that they would find easy to understand. Then we looked at the literature and, ironically, the kids had come up with exactly the same thing that all of the academics had.
We rewrote the policies and then we empirically tested them. We did an experiment. We gave kids the original policies, where their comprehension was very low, and we gave them the rewritten policies, where their comprehension was very high. We published that. We have 10 best practices available to corporations in drafting privacy policies, but they have not been picked up.