However, self-regulation has proven wholly insufficient. No lesser authority than the FTC determined that “industry efforts to address privacy through self-regulation have been too slow, and up to now have failed to provide adequate and meaningful protection.”33 When self-regulations are present, there are no serious sanctions for violating the rules that advertisers draw up among themselves. Nevertheless, the Network Advertising Initiative (NAI) has produced a Code of Conduct that requires opt-in consent for advertisers to use precise information about health conditions such as cancer and mentalhealth.22 Yet the same policy also states that “member companies may seek to target users on the basis of such general health categories as headaches