What changed, and when.
Every change to the breach notification tool, the harm assessment tool and their datasets, newest first. Dataset changes go through a pull request with the source quoted and are signed off by Frontier Cyber's CISO; the monthly scan and the quarterly re-verification add their entries here.
-
One page per jurisdiction (federal, every province and every territory) listing each notification duty and statutory harm test there, generated from the two datasets so they change when the data does. The datasets are also published as plain text at /llms-full.txt for AI assistants.
-
First release. Two-prong assessment (sensitivity, probability of misuse), harms inferred from the facts, the conclusion in each statute’s words, a printable and copyable assessment record, drafts of the OPC report, PIPEDA individual notice, Quebec register entry, Alberta Commissioner notice and BC FIPPA notice, case files you can save and reload, four worked examples, and the Ontario PHIPA reporting circumstances asked explicitly.
Reviewed by Frontier Cyber’s CISO, 2026-10-29.
-
28 statutory harm tests published at /tools/harm-assessment/tests.json, each reconciled against the statute or the regulator’s reproduction of it, with factor lists, examples of harm, record keeping duties and sources. Eleven entries are marked where the legislation site blocked a verbatim read; they are first on the quarterly list.
Reviewed by Frontier Cyber’s CISO, 2026-10-29.
-
Added the determination time: clocks that run from when the organization determines a breach occurred (Treasury Board seven days, Ontario critical incident 72 hours after confirmation) now count from it, and each timeline item says which clock applies. Checklist regrouped into the Privacy Commissioner’s four steps with insurer, police, Cyber Centre, payment processor and credit bureau notices where relevant. Results open with a summary strip; regime detail folds out; case files can be saved and reloaded; a correction form replaces the email address.
Reviewed by Frontier Cyber’s CISO, 2026-10-29.
-
Threshold flags added so duties with no harm threshold (Ontario PHIPA individuals, Newfoundland and Labrador commissioner notice) are marked Notify whatever the harm score; timeline limited to mandatory recipients. Two dead sources replaced.
Reviewed by Frontier Cyber’s CISO, 2026-10-29.
-
First release: 38 regimes across federal, provincial, territorial, health and sector law, with recipients, statutory timing, countdowns where the law sets a clock, and the rules dataset published as JSON under CC BY 4.0. Regulator and counsel updates panel added.
Reviewed by Frontier Cyber’s CISO, 2026-10-29.
Datasets: rules.json and tests.json. How the reviews run is described in how we built a sourced breach rules engine.