Accessibility
Ontario organisations above certain thresholds have website accessibility obligations. Overlay widgets do not discharge them.
Under the Integrated Accessibility Standards Regulation made under the Accessibility for Ontarians with Disabilities Act, designated public sector organisations and larger private and non profit organisations are required to make their internet websites and web content conform to WCAG 2.0 Level AA, with limited exceptions for live captions and pre recorded audio descriptions.
The regulation names 2.0, and building to WCAG 2.2 Level AA satisfies it while also meeting what procurement and enterprise customers now ask for.
Accessibility overlay widgets sit on top of a page and attempt to correct it in the browser. They do not fix the underlying markup, they frequently interfere with the assistive technology a person already uses, and they have been the subject of litigation in the United States rather than a defence against it.
More
PHIPA sets out specific circumstances that make reporting to the Information and Privacy Commissioner mandatory, plus an annual filing most clinics do not know about.
Read the note: When an Ontario clinic must report a privacy breach
The shared responsibility model puts availability on Microsoft and your data on you. Most Ontario businesses we assess have no third party backup of mail, SharePoint or OneDrive.
Read the note: Microsoft does not back up your Microsoft 365 data
A short read on what the federal privacy law expects from a commercial organisation, and the breach reporting obligation that catches people out.
