I certainly did not know about the gravatar leak. By it raises questions for me.
1. Living in Europe I am required to let every visitor know about any tracking cookies that may exist on the site. However if visitors leaving comments on a wordpress install are able to be identify then they could be tracked. Am I breaking the law by not declaring this leak of privacy?

2. Should it be in my privacy policy?

3 Why are automattic not being open with their users? If the EU decide to prosecute can I lead innocence because Matt was keeping me as a non technie in the dark? Or have automattic inc got a special disclaimer that covers this liability for them and us as users?

Ron