Abny Santicola at Fundraising Success Advisor has put together a great package of articles on privacy policies for nonprofits, including a checklist for formulating your own organization's policy.
We think you'll find these articles very useful, together with the further sources Abny cites. Especially given the complexities posed by online data collection and distribution.
The Agitator's editors don't exactly agree on the privacy issue, as these rants indicate.
Roger & Tom