Andrew Patrick, Ph.D.

Independent Research and Consulting
Specialist in Privacy, Security, and Usability

Andrew Patrick provides research and consulting services that can help you ensure that privacy, security, and usability are built into your products or services.

global_team Andrew is an international leader in privacy engineering, and one of the founders of the field of usable security. He has over 25 years of experience in industrial, government, and academic settings. For larger projects, Andrew can assemble a team of experts to meet your requirements.



  • privacy engineering and Privacy by Design
  • virtual Privacy Officer / Data Protection Officer
  • technical assessments for privacy compliance
  • analysis and recommendations for legal and regulatory compliance
  • privacy policy development and implementation
  • privacy accountability
  • strategic and tactical support for entrepreneurs and start-ups
  • privacy awareness and training

  • strategic and tactical planning
  • risk assessments and breach prevention
  • human factors of security systems that determine acceptance and efficacy
  • technical assessments of security risks including packet capture, HTTP(s) flow analysis, man-in-the-middle attacks

  • research methodology and planning
  • usability testing
  • user-centred design and user experience
  • user needs analysis
  • experimental design and analysis
  • statistical analysis and interpretation
  • heuristic analysis
Research and Analysis

  • technical writing
  • science and technology reporting
  • writing, editing, and reviewing scientific reports
  • white papers
  • technology trend analysis
  • competitive intelligence
  • due diligence and technology assessments
  • environment scans


Andrew Patrick also offers workshops and training courses:

  • Privacy Engineering for Entrepreneurs and Start-Ups
    • 1-day general workshop
    • multi-day intensive workshop and consultation customized to your product or service
  • Privacy Engineering for Large Organizations and Government Departments
  • Conducting Privacy Impact Assessments
  • Analyzing Web Applications and Services for Security and Privacy
  • Privacy Awareness Training

We can also customize a session for your specific needs.


Education: Ph.D., Cognitive Psychology, U. Western Ontario

Employment History (details here):

  • IT Research Analyst at Office of the Privacy Commissioner of Canada (2010-2017)
  • Adjunct Research Professor at Carleton University (1988-1991, 2003-)
  • Group Leader and Senior Researcher at National Research Council (NRC) (2001-2009)
  • Manager and Researcher at Nortel (1998-2001)
  • Researcher at Communications Research Centre (CRC) (1989-1998)


Andrew Patrick is based in Ottawa, Canada and practices around the world.

You can reach Andrew Patrick at:

E-mail: (Preferred)
Phone | Text | WhatsApp | Signal: +1 (613) 277-9211
Skype: andrewspatrick
Twitter: @aspatrick