Privacy Research Roadmap
This is a prioritized backlog for useful privacy data products. Each proposal names its input, maintenance burden, and evidence boundary. None of these proposals should be read as completed research, measured traffic, or a guarantee of search or AI citations. For the live broker-catalog verification queue, see the evidence roadmap.
30
interactive opportunities
15
original study designs
0
fabricated outcome rates
Interactive opportunities
Scores are OfflistMe editorial prioritization, not search-volume or backlink measurements. Source links identify inputs to verify before engineering.
| Tool | Problem / dataset | Source / visualization | Maintenance | Scores |
|---|---|---|---|---|
| Registry record explorer SEO use: Broker identity queries | Find a registered broker and its disclosed contact fields. Dataset: California registry snapshot | Source / existing asset Searchable table | Medium Difficulty 2/5 | Uniqueness 8/10 Information gain 9/10 |
| Registry category matrix SEO use: Sensitive-data queries | Understand disclosed sensitive categories. Dataset: California registry fields | Source / existing asset Filterable heatmap | Medium Difficulty 3/5 | Uniqueness 8/10 Information gain 8/10 |
| Registry website-overlap map SEO use: Registry overlap research | See cautious cross-registry website matches. Dataset: CA and Vermont snapshots | Source / existing asset Network/table join | Medium Difficulty 3/5 | Uniqueness 9/10 Information gain 8/10 |
| Broker-stated processing explorer SEO use: Opt-out timing queries | Compare published windows without calling them outcomes. Dataset: Broker source records | Source / existing asset Sortable table | Medium Difficulty 2/5 | Uniqueness 7/10 Information gain 8/10 |
| Opt-out friction calculator SEO use: Removal workflow queries | Estimate documented steps before starting. Dataset: Friction records | Source / existing asset Transparent scorecard | Medium Difficulty 3/5 | Uniqueness 9/10 Information gain 9/10 |
| US privacy-rights finder SEO use: State privacy queries | Identify which state-law page to read first. Dataset: State law records | Source / existing asset Interactive map/table | High Difficulty 3/5 | Uniqueness 8/10 Information gain 9/10 |
| DROP implementation timeline SEO use: California DROP queries | Separate launch, cadence, and scope. Dataset: CPPA guidance and statute | Source / existing asset Source-linked timeline | Low Difficulty 1/5 | Uniqueness 7/10 Information gain 8/10 |
| Privacy-law effective-date timeline SEO use: Privacy-law dates | See when rules took effect. Dataset: Official law milestones | Source / existing asset Filterable timeline | Medium Difficulty 2/5 | Uniqueness 8/10 Information gain 8/10 |
| Enforcement evidence explorer SEO use: Privacy enforcement queries | Find official cases by regulator and data category. Dataset: Selected FTC/AG records | Source / existing asset Search/filter cards | High Difficulty 3/5 | Uniqueness 9/10 Information gain 9/10 |
| Enforcement remedy comparison SEO use: Regulatory penalty queries | Compare remedies without unsupported totals. Dataset: Official case rows | Source / existing asset Remedy matrix | High Difficulty 3/5 | Uniqueness 8/10 Information gain 8/10 |
| HIPAA breach explorer SEO use: Health breach queries | Filter published health breaches. Dataset: HHS OCR records | Source / existing asset Searchable table/chart | High Difficulty 4/5 | Uniqueness 9/10 Information gain 9/10 |
| Breach-report scope explainer SEO use: Identity-theft statistics | Understand reports versus verified incidents. Dataset: FTC Sentinel metadata | Source / existing asset Annotated dashboard | Low Difficulty 2/5 | Uniqueness 8/10 Information gain 9/10 |
| Consumer-report category explorer SEO use: Fraud report queries | Explore FTC report categories and geography. Dataset: FTC Sentinel CSV/dashboard | Source / existing asset Filterable chart/map | High Difficulty 3/5 | Uniqueness 8/10 Information gain 9/10 |
| Personal-data economy map SEO use: What data brokers do | Understand possible data flows. Dataset: Source-linked conceptual model | Source / existing asset Flow diagram | Low Difficulty 2/5 | Uniqueness 8/10 Information gain 8/10 |
| Data-source threat model selector SEO use: Doxxing/privacy queries | Choose a response based on exposed source. Dataset: Editorial framework | Source / existing asset Decision tree | Medium Difficulty 2/5 | Uniqueness 8/10 Information gain 8/10 |
| Profession privacy playbook index SEO use: Profession privacy queries | Find a role-specific guide. Dataset: Profession metadata | Source / existing asset Filterable cards | Low Difficulty 1/5 | Uniqueness 7/10 Information gain 7/10 |
| Sensitive-data vocabulary explorer SEO use: Sensitive-data definitions | Translate regulator terms plainly. Dataset: NIST framework and statutes | Source / existing asset Glossary filter | Low Difficulty 2/5 | Uniqueness 7/10 Information gain 7/10 |
| Privacy-control maturity checklist SEO use: Privacy governance queries | Map controls to a recognized framework. Dataset: NIST Privacy Framework | Source / existing asset Checklist/progress view | Medium Difficulty 3/5 | Uniqueness 8/10 Information gain 8/10 |
| Cybersecurity privacy-control crosswalk SEO use: Privacy/security queries | Connect security actions to privacy risks. Dataset: NIST and CISA guidance | Source / existing asset Crosswalk table | High Difficulty 4/5 | Uniqueness 8/10 Information gain 8/10 |
| GDPR enforcement activity index SEO use: GDPR enforcement queries | Find EDPB work without overgeneralizing. Dataset: EDPB annual report | Source / existing asset Timeline/table | Medium Difficulty 3/5 | Uniqueness 7/10 Information gain 8/10 |
| Source-quality tier browser SEO use: Privacy source queries | Choose stronger evidence for a claim. Dataset: OfflistMe source library | Source / existing asset Filterable source table | Low Difficulty 1/5 | Uniqueness 8/10 Information gain 8/10 |
| Claim provenance checker SEO use: Fact-check/citation queries | See verified, derived, and unpublished claims. Dataset: OfflistMe claim ledger | Source / existing asset Status table | Low Difficulty 1/5 | Uniqueness 9/10 Information gain 9/10 |
| Dataset refresh calendar SEO use: Current data queries | Know when an asset should be rechecked. Dataset: Source update frequencies | Source / existing asset Calendar/table | Medium Difficulty 2/5 | Uniqueness 8/10 Information gain 8/10 |
| Downloadable privacy data catalog SEO use: Privacy dataset queries | Find exports and boundaries. Dataset: OfflistMe exports | Source / existing asset Catalog cards | Low Difficulty 1/5 | Uniqueness 8/10 Information gain 8/10 |
| Removal evidence log template SEO use: Removal verification queries | Document request, response, and verification separately. Dataset: User-provided records | Source / existing asset Guided form/export | Low Difficulty 2/5 | Uniqueness 9/10 Information gain 9/10 |
| Outcome-state benchmark dashboard SEO use: Effectiveness queries | Avoid collapsing sent into deleted. Dataset: Future consented study data | Source / existing asset State funnel | High Difficulty 5/5 | Uniqueness 10/10 Information gain 10/10 |
| Reappearance observation tracker SEO use: Reappearance queries | Record returns without claiming an average. Dataset: Future consented observations | Source / existing asset Dated event timeline | High Difficulty 4/5 | Uniqueness 10/10 Information gain 9/10 |
| Broker contact freshness checker SEO use: Opt-out URL queries | Identify stale privacy URLs. Dataset: Official broker contact records | Source / existing asset Status table | High Difficulty 4/5 | Uniqueness 9/10 Information gain 9/10 |
| Source-to-claim citation export SEO use: Citation use | Give journalists compact citations. Dataset: Claim ledger and sources | Source / existing asset CSV/JSON export | Low Difficulty 2/5 | Uniqueness 9/10 Information gain 9/10 |
| Research change log SEO use: Updated data queries | See what changed between snapshots. Dataset: Versioned source snapshots | Source / existing asset Diff timeline | Medium Difficulty 4/5 | Uniqueness 9/10 Information gain 9/10 |
Original study designs
These designs require consent, pre-registration, safe handling, and explicit limitations. They must never involve CAPTCHA bypass, deceptive accounts, unauthorized submissions, SMTP probing, or unnecessary personal-data collection.
| Study | Hypothesis / method | Metrics / limitation | Ethics / repeatability |
|---|---|---|---|
| Opt-out step study | Hypothesis: Broker flows vary materially. Method: Pre-register 50 brokers; record public steps only. | Metrics: Clicks, fields, verification, account/ID requirements. Limitation: Snapshot may age quickly. | Ethics: No CAPTCHA bypass or unauthorized requests. Repeatability: Annual |
| Broker-stated versus observed timing | Hypothesis: Published windows may not predict outcomes. Method: Consented requests with dated receipts. | Metrics: Stated window, response date, verification outcome. Limitation: Small sample and selection bias. | Ethics: Authorized participants; redact personal data. Repeatability: Annual |
| Removal outcome-state study | Hypothesis: Sent, response, and disappearance differ. Method: Pre-register outcome definitions and fixed URLs. | Metrics: Response, profile status, evidence completeness. Limitation: Search-index changes confound results. | Ethics: No deceptive accounts or scraping. Repeatability: Annual |
| Reappearance observation study | Hypothesis: Profiles may return after removal. Method: Consented participants check fixed brokers. | Metrics: Return event, date, source, remediation. Limitation: Cannot generalize beyond sample. | Ethics: Consent, minimization, safe storage. Repeatability: Quarterly cohort |
| ID-requirement audit | Hypothesis: Verification creates privacy trade-offs. Method: Review public forms and policies; never submit IDs. | Metrics: ID requested, alternatives, stated purpose. Limitation: Policy text may differ in practice. | Ethics: No real identity documents for testing. Repeatability: Semiannual |
| Account-requirement audit | Hypothesis: Some flows require accounts. Method: Review public instructions across a sample. | Metrics: Account, email verification, deletion path. Limitation: Only observes public instructions. | Ethics: No fake accounts or rate-limit bypass. Repeatability: Semiannual |
| Broken-link monitoring study | Hypothesis: Stale links block requests. Method: Check published links respectfully. | Metrics: HTTP status, redirect, relevance. Limitation: Transient outages create false positives. | Ethics: Respect robots, terms, and rate limits. Repeatability: Monthly |
| Privacy-contact freshness study | Hypothesis: Registry contacts can age. Method: Compare registry fields with policy pages. | Metrics: Match, freshness, discrepancy type. Limitation: URLs do not prove ownership. | Ethics: No SMTP probing or messages. Repeatability: Quarterly |
| Category-friction comparison | Hypothesis: Broker categories may differ in friction. Method: Stratified sample by documented category. | Metrics: Median documented steps by category. Limitation: Category labels are derived. | Ethics: No unsupported harm rankings. Repeatability: Annual |
| State-rights usability study | Hypothesis: Consumers misunderstand scope/deadlines. Method: Usability test using official pages. | Metrics: Completion, comprehension, errors. Limitation: Not population-representative. | Ethics: Consent; no legal advice. Repeatability: Annual |
| DROP implementation observation | Hypothesis: A new mechanism needs documentation. Method: Official materials plus consented reports. | Metrics: Source version, status, exception type. Limitation: Do not infer compliance from anecdotes. | Ethics: No automated submissions. Repeatability: Monthly during rollout |
| Breach-source explanation study | Hypothesis: Users confuse reports with incidence. Method: Test comprehension of FTC/HHS labels. | Metrics: Interpretation accuracy before/after. Limitation: Educational outcome is not prevention. | Ethics: Anonymous, consented research. Repeatability: Annual |
| Profession threat-model usability study | Hypothesis: Roles need different checklists. Method: Interview consenting participants. | Metrics: Threat categories and unresolved gaps. Limitation: Qualitative findings are not rates. | Ethics: Avoid unnecessary active-threat details. Repeatability: Annual |
| Citation usefulness study | Hypothesis: Researchers need compact source records. Method: Interview consenting researchers. | Metrics: Time to source, clarity, completeness. Limitation: Small professional sample. | Ethics: No fabricated citation claims. Repeatability: Annual |
| Source refresh reliability study | Hypothesis: Official pages change at different rates. Method: Version permitted metadata and compare fields. | Metrics: Changed fields, elapsed time, broken links. Limitation: Reuse conditions vary. | Ethics: Respect terms and minimize storage. Repeatability: Quarterly |
How to use this roadmap
- Verify the source and reuse conditions before engineering a pipeline.
- Define the question and denominator before collecting observations.
- Publish methodology, date, version, missingness, and limitations with every result.
- Separate verified facts, derived calculations, observations, hypotheses, and recommendations.