This chapter sums up the findings of Part II. It also shows that the foundational split between cognitive and normative interpretations of “reasonable expectations” reflects a deeper rift between different theories regarding the most adequate strategy of regulating privacy and information distribution: whereas the cognitive model, with its aspiration towards transparency and reliance on consent, ultimately pursues individual and societal self-regulation, the normative model, with its penchant for “objective review” of information processing practices, draws towards a more interventionist regulatory stance.