New data on privacy policies shows 20 percent of sites may sell data
arstechnica.com/tech-policy/2012/11/new-data-on-privacy-policies-shows-20-percent-of-sites-may-sell-data
From the page
Saved with the link. Notes from 2007 to 2016 are mostly the page's own words, so this is probably an excerpt.
The PrivacyChoice system comes up with scores based on two groups of policies. One is the policy of the site itself and the other part of the score comes from the privacy policies of the various third-party "tracking" companies that are on the site, usually in the form of advertisements.