I just wanted to solicit some opinions regarding privacy statements. I am working on an academic site that doesn't currently have a privacy statement, but requires some contact information when a visitor registers for class(es). There are currently no plans to disclose this information to any third parties. My question is: what are the benefits of publishing this? Do people actually notice when these are missing, and bother to care? Has anyone ever been put on the spot regarding a missing statement, or the terms of a standing one?

Besides the relatively small amount of effort to throw one together, it seems like a privacy statement might only increase the potential of legal expenses down the road. Also, doesn't no privacy statement equal no legal obligations?

One way or another, I'm guessing that in the end I'll probably try to piece a privacy statement together. I'd be interested in hearing people's experiences, and advice in doing so.

Thanks in advance.