Privacy in the ad targeting landscape?

What do you think are some of the most blatantly privacy violation ad targeting technologies at the moment? How about great examples of "privacy by design"?