Companies have to fully confront the privacy issues they face and rethink their policies from the bottom up.