[{"titre":"Update from the Knowledge Management Special Interest Group: Web Tracking Tools","pubDate":"Mon, 26 Oct 2026 07:55:47 +0100","id":3241459,"description":"From time to time, this blog will highlight initiatives, ideas, or activities coming from members, committees or special interest groups (SIGs). Today: An Update About Web Tracking Tools , by Katie Thomas, Resource and Reference Librarian, Stikeman Elliott LLP (Toronto). The CALL Knowledge Management SIG had a session on November 30 th that looked at Web Tracking Tools. There are a lot of website tracking tools out there so it helps to have a guide to get you started. I based my presentation on the AALL Cool Tools (access only for attendees of American Association of Law Libraries 2021 conference) session where eight trackers were evaluated. In our session I asked the participants to write down sites they would like to track and they were all different. So, there is a need! First, what criteria should be used for evaluating? It depends. Every workplace is different and different things needs to be monitored. However, there are three that stand out. 1.   Ease of Use You don’t want to spend time setting things up and you want to understand WHAT you are setting up 2.   Price A lot of the tools are free and you can continue to have them free forever or, you can pay. Prices vary depending on functionality. 3.   Collaboration This allows you to work with colleagues tracking the same website. Say, if someone is on vacation. What to Track? Any number of things to track. Depends what you want to track! Here’s some that are popular: Prices (book, software, flights, stocks) Are they increasing / decreasing Text tracking Articles, preprints, legislation, case law, newspapers Competitors When does a competitor post commentary on a specific case Archiving Like Wayback, but you can customize for the websites you want Features? What do you want your tracker to do? Here are the popular features: Bulk adding of urls into the tracker Captcha bypass (or I am fed up counting fire hydrants) Password protected pages Proxy support, don’t want tracker to get blocked Tracking multiple elements on one page (there might be pricing data and text you want to capture changes to on the same page) Notification. Or would you prefer Slack, Discord, mobile N.B.: Be careful of “quick” and “instant” – understand what these mean (does quick mean within an hour or 5 minutes) Data export and reports Summary of web tracking tools","source":"Canadian Association of Law Libraries / L'Association canadienne des bibliothèques de droit CALL/ACBD Blog","url":"https://www.callacbd.ca/CALL-Blog/12197599"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","titre":"Practice Fusion case suggests 6 health privacy pointers","id":3194910,"pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"pubDate":"Thu, 19 Mar 2026 14:12:59 +0100","id":2769535,"titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary","url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","source":"EDPB News"}]