A new analysis of 40 online privacy statements from nine financial institutions that are covered by the Gramm-Leach-Bliley Act (GLBA) was completed in July. Our findings show that compliance with the GLBA “clear and conspicuous” requirement by the analyzed policies is at best questionable, and demonstrate that most policies require a reading skill considerably higher than the Internet population’s average literacy level.