By Brendan Sasso - 12/05/11 08:37 PM EST
"Like any other advertising claim, what you say about how you handle people's info has to be truthful, not deceptive, and backed up with objective proof," Fair wrote.
She encouraged companies to avoid "geek-speak and legal mumbo jumbo" and to add some color to their privacy pages.
She noted that vague platitudes, which are common in privacy policies, are still legally enforceable. She said the FTC settled charges with a company that said it was "committed to maintaining our customers' privacy" but failed to protect users from a well-known hack attack.
Fair encouraged companies to keep their privacy policies up to date, but warned that they need to notify consumers about changes.
Part of the reason for the FTC's action against Facebook was that the social network changed its privacy settings in 2009 without its users' consent.