Roslyn Layton: Should online privacy legislation be based on trust or control? (American Enterprise Institute)