Even the Federal Trade Commission, which has spearheaded a campaign pressing industry to regulate how it uses the personal information it collects online, did not meet the privacy standards it asks of commercial sites, the General Accounting Office said in its report.

Another GAO report found federal agencies overwhelmingly adhere to Clinton administration privacy requirements for government sites.

The Office of Management and Budget sets the privacy policy for government agencies and those requirements are not as stringent as the FTC’s requirements for commercial sites. Laws that protect consumers’ information also have not been updated to reflect technology advances and the Internet, the GAO found.