I am curious to know if every website should have a privacy policy and/or a terms of use page. What are the legal implications if a site doesn't have them? Are there certain categories of websites that legally require them?
When does a website require a privacy policy and/or terms of use?
legal;privacy policy;terms of use
This is just my opinion but I would say any site that allows visitors to interact should have a privacy policy and terms of use page.  There are really 3 kinds of sites that go from least to most well documented in my mind.Sites that allow visitor interaction like posting comments without an accountSites that allow visitors to create accounts and interact with the siteSites that allow visitors to spend money on things like buying goods, buying services, or donating money.I think you will always want, if you are not required by law (this part I don't know), to have a privacy policy and terms of use for a site that allows money to change hands.  Luckily this is usually done for you by companies like PayPal if you partner with them. In general though you will probably want to have your own terms and privacy policy policy even if it just points to the processors.The main purpose of the privacy policy and terms of use are to cover the site owner from legal actions.  When the site only allows comments there is not much to worry about.  If the site allows users to login and create content then there is some room for concern and a small terms and privacy doc are good to just cover yourself or your company from a disgruntled person.In the end I think having terms and a privacy policy is kind of like having internet security.  Web Security is always a function of the strength of what you have against the number of people that want to break it.  The bigger a site gets the more likely it is to come under scrutiny by others either looking for a free money or to take advantage of something/someone in a position of power.