Businesses should carefully review their privacy policies, as statements made in these documents can create enforceable legal obligations and potential liability if not accurately drafted or followed.