Only three of 76 newly enrolled members of the Direct Marketing Association had privacy policies meeting the association's own stated requirements, according to a survey released by the Electronic Privacy Information Center. The finding undercuts a central argument made by industry groups for years: that businesses can be trusted to police their own data practices without government intervention. EPIC's review suggests that, at least among the DMA's newest members, the promise of self-regulation has not translated into practice.