Answer to Question 1
They include: (1) notice, (2) consent, (3) access, and (4) security. Policies of sites like Facebook should provide for notifying members about privacy controls, asking consent for how data will be collected and used, giving members access to their own data, and ensuring data are secure.
Answer to Question 2
b