This symposium contribution applies an institutional choice analysis, looking at whether legislatively-driven regulation or judicially-derived common law is better suited at addressing possible privacy violations that result from the disclosure of sensitive information by websites engaged in...