Since the 1960s privacy advocates have relied on regulatory and legislativeapproaches to privacy protection in the United States, Canada and Europe. Whileimportant progress has been made in certain areas, there are large gaps andsignificant loopholes in existing legislation. I argue that a market-based approachto privacy protection would be far more effective and efficient in protectingindividual information than current approaches