Eight months after the Direct Marketing Association promised that new members would post privacy policies and offer opt-out choices, a review by the Electronic Privacy Information Center found that