Privacy Mandates are Bad News for Web Users