diff --git a/README.md b/README.md
index c92ada13..b7031f86 100644
--- a/README.md
+++ b/README.md
@@ -560,7 +560,7 @@ See:
 - Bluetooth controllers are not automatically enabled at boot (`AutoEnable=false`).
 - Pairable and discoverable modes time out after 30 seconds of inactivity.
 - Only one Bluetooth controller is exposed to the system (`MaxControllers=1`).
-- Resolvable Private Addresses (RPAs) are enforced (`Privacy=network/on`),
+- Resolvable Private Addresses (RPAs) are enforced (`Privacy=network`),
   preventing MAC-based tracking.
 
 See:
diff --git a/etc/bluetooth/30_security-misc.conf#security-misc-desktop b/etc/bluetooth/30_security-misc.conf#security-misc-desktop
index 8de8384c..02b34ef2 100644
--- a/etc/bluetooth/30_security-misc.conf#security-misc-desktop
+++ b/etc/bluetooth/30_security-misc.conf#security-misc-desktop
@@ -16,13 +16,13 @@ DiscoverableTimeout = 30
 # Default=0 (unlimited)
 MaxControllers=1
 
+# network/on: A device will only accept advertising packets from peer
+# devices that contain private addresses. It may not be compatible with some
+# legacy devices since it requires the use of RPA(s) all the time.
+Privacy=network
+
 [Policy]
 # AutoEnable defines option to enable all controllers when they are found.
 # This includes adapters present on start as well as adapters that are plugged
 # in later on. Defaults to 'true'.
 AutoEnable=false
-
-# network/on: A device will only accept advertising packets from peer
-# devices that contain private addresses. It may not be compatible with some
-# legacy devices since it requires the use of RPA(s) all the time.
-Privacy=network/on