Tools

Free, sourced, and nothing leaves your browser.

Small tools we built because clients kept asking the same questions during incidents and assessments. Each one cites its sources and says when they were last checked.

CANADA WIDENO DATA LEAVES YOUR BROWSEREVERY RULE SOURCED

Breach notification decision tool

Answer a few questions about a privacy breach or cyber incident and see every Canadian law that requires notification, who to tell, what the law says about timing, and the source for each rule.

A sourced list of duties and deadlines you can print and hand to counsel.

Every Canadian notification duty, on one page
Federal, every province and territory, health acts and sector regulators, each with its recipients, timing, threshold and the statute it comes from.
What regulators and counsel published this month
A live feed from the privacy commissioners, the Cyber Centre and Canadian law firm bulletins, refreshed hourly.
Our reporting rules engine
The engine and its dataset are open: 38 Canadian regimes as machine readable JSON under CC BY 4.0, a source and a verification date on every rule, and the decision logic published with its tests.

Open the tool

RROSH AND SERIOUS INJURYNO DATA LEAVES YOUR BROWSEREVERY TEST SOURCED

Harm assessment tool

Work through the real risk of significant harm test the way regulators expect: sensitivity of the information, probability of misuse, the harms the facts make plausible, and the conclusion in each statute’s words, with a record you can keep.

A reasoned, dated harm assessment record for the incident file, and a one-click hand-off to the notification tool.

The two prongs, factor by factor
Sensitivity and probability of misuse scored against the factors the OPC, the Alberta and Quebec regulators and the health acts list, each reason written out.
Every Canadian harm threshold, quoted
PIPEDA, Alberta PIPA, Quebec Law 25, the public sector and health acts: the statutory test, the factors, the examples of harm and the record each requires.
Harm tests dataset
The statutory tests as machine readable JSON under CC BY 4.0, with a source and a verification date on every entry.

Open the tool

By jurisdiction

Breach notification rules for each province and territory.

How they are kept current

Verified dates, open items, and a change log.

Every rule and every statutory test carries the date it was last checked against its source. A monthly scan and a quarterly re-verification run on a schedule and ship corrections as pull requests with the source quoted. Entries whose statute text could not be read verbatim are marked on the page. Read the change log

Need more than a tool?

When the question needs a consultant.

Incident response, breach coaching, tabletop exercises and the privacy program behind them. A consultant replies within one business day.

Start on Frontier Verify