RightsRelay / Digital safety in the public interest

Issue areas

Digital risks are connected. Our understanding should be too.

RightsRelay examines the points where personal data, platform design, account security and manipulation meet. The categories below are a map of those relationships—not isolated checklists.

A breach can make an impersonation attempt more convincing. That attempt can compromise an email account. The account can expose more data, and an unclear reporting process can leave the same resource in place. Treating each event as a separate mistake hides the system that links them.

01

Data exposure

Personal information becomes more dangerous when it is copied, combined, made searchable and separated from the reason it was collected.

A new password can protect an account. It cannot change a home address, employment history or identity detail that has already escaped into other systems.

  • What changes when a limited record becomes globally searchable?
  • Which details create risk when combined with other sources?
  • What can be removed, restricted or made less discoverable?
Read about the lasting impact of a breach
02

Fraud & manipulation

Digital fraud is not only a false story. It is a system for finding targets, building credibility, creating pressure and moving value quickly.

The story changes constantly. The underlying mechanics—authority, isolation, pressure and irreversible payment—are far more stable.

  • How do impersonation attempts borrow trust from real institutions?
  • Why do urgency, secrecy and unusual payment methods appear together?
  • How are previous victims identified and targeted again?
Understand the impersonation pattern
03

Accounts & identity

Accounts are connected through email, recovery channels, saved payment methods and shared identity information. One compromise can travel.

Account security is an ecosystem problem. Recovery depends on understanding the relationships between services, not securing each login in isolation.

  • Which account can reset or unlock the others?
  • What persistence can remain after a password change?
  • Which sessions, forwarding rules and connected applications need review?
Use the account recovery sequence
04

Platform responsibility

Services decide what data to collect, which defaults to ship, how clearly to disclose a failure and whether reporting harmful activity is usable.

Useful personal guidance cannot replace secure defaults, data minimisation, transparent incident communication and accountable product decisions.

  • Does the safest outcome require expert configuration?
  • Is unnecessary information retained because storage is easy?
  • Can people understand and use the reporting and recovery process?
Read why caution is not enough
05

Information integrity

Polished presentation, confident language and realistic media are cheap to produce. Trust increasingly depends on origin, context and corroboration.

Verification is not cynicism. It is a repeatable method for separating evidence from the confidence or reach of its presentation.

  • Where did the claim or media first appear?
  • What context is missing from the version being shared?
  • Which independent source can confirm the important part?
Use the verification routine