Real action to protect privacy hinges on big institutions, to the point that small, individual measures pale in comparison. (New York Times)