Online marketing creates the clearest privacy concern because it often involves collecting, storing, analyzing, or using personal information through websites, online forms, cookies, social media campaigns, email lists, quoting portals, and digital lead-generation systems. Insurance intermediaries must be careful that personal information is collected with proper consent, used only for legitimate business purposes, protected from unauthorized access, and not disclosed improperly. Privacy obligations also intersect with electronic communication rules when prospects are contacted through email or digital campaigns. Walk-ins involve personal information too, but the question targets the sourcing method where privacy risk is especially prominent. Upselling normally occurs within an existing client relationship, where the brokerage already has a lawful purpose to hold certain information, though privacy rules still apply. Tracking expiry dates may also require care, especially when expiry information is gathered from prospects or third parties, but online marketing is the most direct and comprehensive privacy exposure listed. The intermediary must ensure marketing activity does not become intrusive, misleading, or non-compliant. References/topics: Sales; privacy compliance, online prospecting, digital marketing, consent, client information handling.