Features
Tracking a fictional personal data access and deletion request case
Fictional privacy request case: identify a UK organization, scope access, verify identity, review the response, request deletion, and document a complaint.
Contributor
Amelia A. Foster
A broad overview can leave the decisive question unanswered. Subject: Online Privacy and Personal Data: privacy, notes. Amelia A. Foster is the editorial byline assigned to this area. Practical guides, comparisons and the questions behind a choice form this editorial remit. This is an editorial pen name used by the publication, not a claim of an independently verified personal identity.
Rules
Privacy request problems: a reply that is partial, redacted or refused
A privacy request reply with missing records, redactions or a refusal: how to find the gap, ask what was searched and answer a cited exemption.
Guides
Personal privacy rights guide: an overview
This personal privacy rights guide explains how to read privacy notices, make focused data requests, understand common rights, and keep useful records.
Guides
How to prepare and track a personal data rights request
Build a personal data rights request that names the right organization, states the outcome you want, and leaves a receipt you can follow up on.
Guides
Cross-border data flows PIPEDA: Ontario firms and US partners
Cross-border data flows PIPEDA: how Ontario small firms manage US vendors, document transfers, assess breach duties, and use contracts and technical controls.
Features
Containing a fictional email takeover after a password reuse alert case
A fictional reuse alert turns into an email takeover: secure recovery, end sessions, kill forwarding rules, warn contacts, and log each step.
Reviews
Data breach, credential stuffing, phishing, malware, SIM swap: telling them apart
Data breach, credential stuffing, phishing, malware and SIM swap compared by kind and evidence, so each incident gets the right label before anyone responds.
Rules
Smart home privacy problems: practical responses
Smart home privacy problems with logins, camera alerts, voice assistants, cloud history and resale, with the response steps NIST, the FTC and the CCPA support.
Reviews
Local processing, cloud processing, live view, recorded clips, voice history, and device telemetry compared
Local and cloud processing, live view, clips, voice history and telemetry are separate records with separate controls, retention and deletion paths.
Guides
Privacy settlement examples: six recurring shapes, and the evidence that decides each
Six privacy settlement shapes, from notice gaps to consent design, and the dated internal evidence such as logs and tickets that decides each one.
Features
Privacy settlements: the two tracks, and how to read them
Privacy settlements: the headline number is the least informative part. Two tracks, what a resolution establishes, and how to read the operative document.
Guides
Private messaging setup: plan before you choose
A private messaging setup starts with requirements, then reviews encryption, identity, devices, group controls, backups, metadata, and exit plans.
Guides
SIM-swap and phone porting fraud in Canada, CRTC rules and carrier steps
SIM-swap fraud Canada: how porting fraud works, the CRTC porting rules, Bell, Rogers and Telus port-freeze and account-lock options, and how to report to the CAFC.
Rules
Street cameras in Toronto, Vancouver and Montreal: the law and regulator for each city
Which Canadian privacy law governs street cameras and drones in each city, how to request your footage or records, and which regulator takes the complaint.
Guides
How to file a privacy complaint with the OPC or a provincial commissioner
To file a privacy complaint Canada wide, pick the right commissioner, use the right official form, and bring dated evidence and a clear timeline.
Guides
How rural and northern internet users in the territories can guard accounts
Rural internet privacy Canada: how satellite and fixed-wireless users in Manitoba, Yukon, NWT and Nunavut can secure accounts on slow shared links.
Rules
How PIPEDA and Quebec Law 25 change consent for small Canadian businesses
PIPEDA vs Quebec Law 25: consent, breach reporting and privacy officer duties differ for small businesses in Quebec and the rest of Canada, and here is how.
Guides
Halifax and St. John's health privacy, identity theft and SIM-swap risks
Halifax St John's privacy risks: health records, identity theft and SIM swaps in Nova Scotia and Newfoundland and Labrador, with steps and reporting routes.
Guides
Data-broker opt-outs in Canada, PIPEDA limits and provincial lists compared
Data-broker opt-outs Canada: compare PIPEDA with provincial rules, find people-search sites listing Canadians, and run removals that stick for good.
Guides
Canada to U.S. cloud data transfers, PIPEDA and Schrems-style risks
Canada US data transfers PIPEDA: how U.S. surveillance law, the OPC and cloud contracts shape risk for Canadian data stored with U.S. providers.
Rules
Social media privacy problems: audience collapse, resharing and impersonation
Social media privacy problems: how audience collapse, resharing, and impersonation happen, plus the settings and reporting steps that can help.
Guides
How to run a practical social media privacy review
A social media privacy review maps every account, audience and content surface, including friend lists tags and old posts, before you change a single setting.
Features
Stolen account session recovery: a fictional privacy case
Stolen account session recovery is a privacy issue. This fictional case covers exposure, token revocation, privacy settings, and removing unauthorized posts.
Rules
Account security problems: password reuse, phishing, SIM swaps and stale sessions
Spot password reuse, phishing, SIM swaps and stale sessions, then contain each account takeover vector, repair the access paths and verify the fix held.
Features
Mapping the data lifecycle of a fictional fitness account case
Fictional fitness account case mapping signup, device signals, workout records, inferences, sharing, exports, retention, deletion, and verification limits.
Features
Reducing location exposure in a fictional neighborhood marketplace app case
Fictional neighborhood marketplace case reducing location exposure through feature mapping, approximate areas, listing controls, retention, deletion, and tests.
Guides
Cloud storage privacy under California and Illinois law compared
Cloud storage privacy state laws differ sharply: California CCPA rights versus Illinois BIPA and breach rules, plus provider retention policies.
Guides
What PIPEDA and the Privacy Commissioner mean for Canadian PR data
PIPEDA Privacy Commissioner PR: how Canadian teams handle consent, breach reporting, retention and OPC enforcement when campaign data is at stake.
Maintenance
Account email, password, passkey, multifactor, recovery, session, device, and alert checklist
Account security checklist for email, passwords, passkeys, MFA, backup authenticators, recovery, sessions, trusted devices, connected apps, and alerts.
Guides
Mobile App Permission Audit: A Step-by-Step Guide
Use this mobile app permission audit to review Android and iPhone access, restrict background data, and record setting changes with a reusable checklist.
Reviews
Browser tracking methods compared: cookies, local storage, fingerprinting and pixels
Browser storage and tracking methods compared by source, persistence, transmission, cross-site reach, deletion, common uses, privacy limits, and control options.
Maintenance
Data broker opt-out checklist for identity and records
Use this data broker opt-out checklist to limit identity proof, record each request, route California submissions through DROP, and verify listing changes.
Maintenance
Mobile app permissions checklist for removing an app: camera, microphone, photos, contacts and location
Before you delete a mobile app, revoke its camera, microphone, photos, contacts and location access, clean up what it left and close the account.
Reviews
Authentication methods compared: password managers, passkeys, security keys and SMS codes
Six authentication methods compared on what proves access, phishing resistance, device dependence, backup and recovery, and account lockout risk.
Maintenance
Personal data collection, purpose, access, sharing, retention, security, and deletion checklist
Personal data lifecycle checklist covering purpose, collection, notice, access, vendors, retention, security, deletion, requests, incidents, and evidence.
Guides
Personal data privacy guide: mapping data flows
A personal data privacy guide to mapping data flows, limiting collection, retention, security and accountability in practice.