This is exactly the kind of things that the Obama Administration's NSTIC policy aims to create. I feel like a number of companies (Google, Facebook, your bank, specifically) already have plans to do this.
EDIT: When the NSTIC was announced, many organisations I respect, and typically agree with, game out against it[1]:
"Shortly after the draft's release, the Electronic Privacy Information Center, in conjunction with a number of other consumer-rights and civil liberties organizations[5], sent the Committee a statement in response to the draft NSTIC policy, requesting that the White House provide a clearer and more complete plan to create and safeguard Internet users' rights and privacy."