When was the last time even a privacy lawyer read a privacy policy on a site visited for leisure?  Privacy policies need to meet certain legal requirements, but also need to be clear and simple, a balance that can be difficult to achieve, as evidenced by the proliferation of complex policies. At a recent IAPP web conference, David Kantrowitz, of counsel at Goodwin Procter; Matan Balas, principal at Balas Law; and Ashley Yesayan, founder of OneVillage, a portal connecting cancer patients with tools, content and services, discussed their experiences drafting policies and shared insights on striking that balance. We share their insights in this article that first appeared in our sister publication the Cybersecurity Law Report. See “How Do You Put a System of Privacy and Security Controls in Place When Your Target Keeps Moving?” (May 26, 2021).