A just-released Carnegie Mellon study has concluded that large numbers of websites are misrepresenting their P3P privacy practices, “thus misleading users and rendering privacy protection tools ineffective.” A similar report on flash cookies inspired a spate of lawsuits.