Practices, security and privacy