- Most companies share data, but 20 percent of companies share data within their business group, 15 percent share with business partners, and 3 percent share data with outside parties without explicit permission.

- Just 37 percent of companies allow users to opt into ongoing e-mail marketing; the rest use implied consent and demand action by those customer who prefer not to receive e-mails.

- All but one of the companies reviewed use cookies, but just 25 percent provide a full explanation of why cookies are used.

- Sixty percent of companies do not always use strongly contrasting colors for the site text, making it harder for navigation, especially for people who are visually impaired.