This paper was also workshopped (by invitation) at the Privacy Law Scholars Conference (PLSC), June 2012, Washington, DC.