Features
Tracking a fictional personal data access and deletion request case
Fictional privacy request case: identify a UK organization, scope access, verify identity, review the response, request deletion, and document a complaint.
Desk
Guides Desk
Complete walkthroughs of privacy notes, written to be followed rather than skimmed.
Maintenance
Privacy request deadlines: receipts, counting methods, extensions, identity proof retention, and complaint limits
A date-calculation guide for privacy requests in the United States and Canada: receipt, counting methods, extensions, identity-copy deletion, and complaint limits.
Guides
Personal privacy rights guide: an overview
This personal privacy rights guide explains how to read privacy notices, make focused data requests, understand common rights, and keep useful records.
Guides
How to prepare and track a personal data rights request
Build a personal data rights request that names the right organization, states the outcome you want, and leaves a receipt you can follow up on.
Guides
Cross-border data flows PIPEDA: Ontario firms and US partners
Cross-border data flows PIPEDA: how Ontario small firms manage US vendors, document transfers, assess breach duties, and use contracts and technical controls.
Features
Containing a fictional email takeover after a password reuse alert case
A fictional reuse alert turns into an email takeover: secure recovery, end sessions, kill forwarding rules, warn contacts, and log each step.
Guides
How to respond when an online account or personal record is exposed
Account exposure response, step by step: pick a trusted route, secure recovery channels, freeze your credit, report the misuse, and keep watching.
Features
Roommate camera privacy case: reviewing shared access paths
This roommate camera privacy case walks through a shared-access review: map every path, remove a former roommate, reset roles, and shorten cloud retention.
Guides
Personal data incident guide: breach notices, account takeover, phishing, identity theft, containment, and recovery
Personal data incident guide to verify breach notices, contain account takeover, handle phishing, protect identity, preserve evidence, and track recovery.
Guides
Privacy settlement examples: six recurring shapes, and the evidence that decides each
Six privacy settlement shapes, from notice gaps to consent design, and the dated internal evidence such as logs and tickets that decides each one.
Maintenance
Smart device privacy checklist for the day a household member leaves
A smart device privacy checklist for when a resident leaves: remove access, change shared credentials, review recordings and phones, cancel services.
Features
Volunteer messaging migration case: a fictional example
Volunteer messaging migration case: a fictional group routes messages, sets access and retention rules, tests devices, and moves coordination from email.
Guides
Smart device setup: a general privacy checklist
Use this general smart device setup checklist to verify ownership, secure accounts, limit permissions, review recording, test access, and plan for reset.
Guides
Smart home privacy guide: a household checklist
A smart home privacy guide as a household checklist: inventory devices, set recording and voice history limits, control accounts and guests, plan disposal.
Maintenance
Message recipient, channel, device, encryption, backup, attachment, metadata, retention, and deletion checklist
A private message checklist covering recipient identity, channel encryption, device traces, backups, attachments, metadata, retention, and deletion.
Features
Privacy settlements: the two tracks, and how to read them
Privacy settlements: the headline number is the least informative part. Two tracks, what a resolution establishes, and how to read the operative document.
Guides
Private messaging setup: plan before you choose
A private messaging setup starts with requirements, then reviews encryption, identity, devices, group controls, backups, metadata, and exit plans.
Guides
Private communications guide: email, messaging, encryption, metadata, backups, attachments, and retention
How email and messaging differ on encryption, metadata, recipients, previews, backups, attachments, and retention, and how to choose a channel.
Guides
Quebec Law 25 for Montreal businesses: French privacy notices, consent, privacy officer, and breach reports
How Montreal businesses draft French and English privacy notices under Quebec Law 25, with consent wording, privacy officer duties, breach logs, and data requests.
Guides
SIM-swap and phone porting fraud in Canada, CRTC rules and carrier steps
SIM-swap fraud Canada: how porting fraud works, the CRTC porting rules, Bell, Rogers and Telus port-freeze and account-lock options, and how to report to the CAFC.
Rules
Street cameras in Toronto, Vancouver and Montreal: the law and regulator for each city
Which Canadian privacy law governs street cameras and drones in each city, how to request your footage or records, and which regulator takes the complaint.
Guides
How to file a privacy complaint with the OPC or a provincial commissioner
To file a privacy complaint Canada wide, pick the right commissioner, use the right official form, and bring dated evidence and a clear timeline.
Guides
How rural and northern internet users in the territories can guard accounts
Rural internet privacy Canada: how satellite and fixed-wireless users in Manitoba, Yukon, NWT and Nunavut can secure accounts on slow shared links.
Rules
How PIPEDA and Quebec Law 25 change consent for small Canadian businesses
PIPEDA vs Quebec Law 25: consent, breach reporting and privacy officer duties differ for small businesses in Quebec and the rest of Canada, and here is how.
Guides
Halifax and St. John's health privacy, identity theft and SIM-swap risks
Halifax St John's privacy risks: health records, identity theft and SIM swaps in Nova Scotia and Newfoundland and Labrador, with steps and reporting routes.
Guides
Data-broker opt-outs in Canada, PIPEDA limits and provincial lists compared
Data-broker opt-outs Canada: compare PIPEDA with provincial rules, find people-search sites listing Canadians, and run removals that stick for good.
Features
Teacher Social Media Privacy Case: Splitting Two Audiences
A fictional teacher social media privacy case shows how to separate public professional and private family audiences, test visibility, and handle tags.
Guides
All electric home case studies privacy: what to review
All electric home case studies privacy: review what a program receives, what a release allows, and how to limit location, energy data, photos, and reuse.
Guides
How to run a practical social media privacy review
A social media privacy review maps every account, audience and content surface, including friend lists tags and old posts, before you change a single setting.
Features
Stolen account session recovery: a fictional privacy case
Stolen account session recovery is a privacy issue. This fictional case covers exposure, token revocation, privacy settings, and removing unauthorized posts.
Features
Mapping the data lifecycle of a fictional fitness account case
Fictional fitness account case mapping signup, device signals, workout records, inferences, sharing, exports, retention, deletion, and verification limits.
Features
Reducing location exposure in a fictional neighborhood marketplace app case
Fictional neighborhood marketplace case reducing location exposure through feature mapping, approximate areas, listing controls, retention, deletion, and tests.
Features
Removing a fictional home address from several people-search listings case
Fictional people-search case removing a home address through evidence capture, safe requests, family coordination, source review, result tests, and monitoring.
Features
Separating work, shopping, and personal browsing in a shared laptop case
Fictional shared laptop case separating work, shopping, and personal browsing through device accounts, profiles, sync, permissions, extensions, and cleanup.
Guides
PIPEDA and Quebec Privacy Law: What Canadian Users Must Know
PIPEDA Quebec privacy law splits Canadian users into two privacy regimes. Learn federal and Quebec disclosure duties, records, and penalties.
Guides
Cloud storage privacy under California and Illinois law compared
Cloud storage privacy state laws differ sharply: California CCPA rights versus Illinois BIPA and breach rules, plus provider retention policies.
Guides
What PIPEDA and the Privacy Commissioner mean for Canadian PR data
PIPEDA Privacy Commissioner PR: how Canadian teams handle consent, breach reporting, retention and OPC enforcement when campaign data is at stake.
Maintenance
Account email, password, passkey, multifactor, recovery, session, device, and alert checklist
Account security checklist for email, passwords, passkeys, MFA, backup authenticators, recovery, sessions, trusted devices, connected apps, and alerts.
Guides
Mobile App Permission Audit: A Step-by-Step Guide
Use this mobile app permission audit to review Android and iPhone access, restrict background data, and record setting changes with a reusable checklist.
Guides
Browser privacy guide: cookies, storage, fingerprinting, permissions, history, extensions, and profiles
A browser privacy guide to cookies, site storage, fingerprinting, permissions, history, autofill, extensions, and profiles, with checks you can run.
Guides
Data broker privacy guide: collection, profiles, people search, marketing lists, risk, opt-outs, and monitoring
How data brokers build profiles from public records and purchases, which opt-outs actually remove a listing, and how to document and monitor each request.
Maintenance
Data broker opt-out checklist for identity and records
Use this data broker opt-out checklist to limit identity proof, record each request, route California submissions through DROP, and verify listing changes.
Guides
Find and document: a data broker opt-out workflow
Run a data broker opt-out workflow: find your listings on named people-search sites, use each broker's removal path, and log every dated request.
Guides
How to harden a high-value online account without locking yourself out
Harden a high-value account by proving recovery control, adding a tested backup method, and clearing stale sessions before you change anything.
Guides
Personal data mapping for one online activity
Personal data mapping can trace one online activity from what you submit and what a service observes to recipients, copies, controls, and evidence.
Maintenance
Mobile app permissions checklist for removing an app: camera, microphone, photos, contacts and location
Before you delete a mobile app, revoke its camera, microphone, photos, contacts and location access, clean up what it left and close the account.
Guides
Mobile app privacy guide: permissions, location, contacts, photos, microphones, identifiers, and background access
Mobile app privacy guide covering permissions, location, contacts, photos, microphones, identifiers, and background access, plus what to revoke and when.
Maintenance
Personal data collection, purpose, access, sharing, retention, security, and deletion checklist
Personal data lifecycle checklist covering purpose, collection, notice, access, vendors, retention, security, deletion, requests, incidents, and evidence.
Guides
Personal data privacy guide: mapping data flows
A personal data privacy guide to mapping data flows, limiting collection, retention, security and accountability in practice.
Guides
Private account security guide: passwords, passkeys, multifactor authentication, recovery, sessions, and alerts
A private account security guide to passwords, passkeys, recovery, sessions, and privacy controls for data access and takedown requests.