[Princeton]

The proper way to do it is to add a P3P (Privacy Policy) according to W3C SPECS. If you modify the headers on the server side each site on the server will appear as if it has a P3P compliant policy. If anyone takes your advice they are actually misleading their visitors and members.

At its most basic level, P3P is a standardized set of multiple-choice questions, covering all the major aspects of a Web site's privacy policies. Taken together, they present a clear snapshot of how a site handles personal information about its users. P3P-enabled Web sites make this information available in a standard, machine-readable format. P3P enabled browsers can "read" this snapshot automatically and compare it to the consumer's own set of privacy preferences. P3P enhances user control by putting privacy policies where users can find them, in a form users can understand, and, most importantly, enables users to act on what they see.

NOTE: P3P has been around for years but has never gain attention.