The Feminine Intelligence Agency (FIA) is committed to empowering women by providing tools and resources to recognize and respond to coercive and manipulative behaviors. As FIA plans to expand its services, ensuring the privacy and security of user data is paramount. This project aims to evaluate and enhance FIA's current data handling practices to align with stringent privacy standards such as PIPEDA and GDPR. The project will involve researching best practices in data privacy, assessing FIA's existing data collection and storage methods, and recommending improvements. The goal is to create a robust framework that safeguards user information while supporting FIA's mission of social impact. By focusing on privacy, the project will help FIA build trust with its users and stakeholders.

We’re inviting your team to:

✅ Conduct a review of FIA’s current and planned data handling (minimal as it is—like names, session scheduling, or chat interactions).

✅ Develop a data privacy policy that establishes:

• What data FIA might collect in the future (e.g., scheduling, user profiles, chatbot interactions).
• The legal and ethical justifications for collecting this data.
• How this data will be stored, protected, and eventually deleted or anonymized.
• ✅ Create practical data breach prevention and response protocols—ensuring FIA is ready for any future incidents, even as a small nonprofit.
• ✅ Propose a set of general data principles that reflect FIA’s mission of radical safety, respect, and minimal data collection—aligned with user empowerment and psychological safety.
• ✅ Provide a privacy checklist that FIA can use for any new feature, tool, or program it develops (like the Listening Lab’s secure scheduling tool or the ChatBoy app).

Study FIA’s mission and potential data collection points (like the Listening Lab, ChatBoy, scheduling and onboarding tools).

Develop a data privacy policy that:

• Explains what data FIA might collect in the future—with an explicit lens on user safety.
• Describes how this data will be stored, encrypted, and eventually deleted or anonymized—considering not just internal risks but external targeted attacks.
• Articulates users’ rights in a way that reinforces FIA’s mission of agency and power literacy.

Create a data breach prevention and response protocol that:

• Goes beyond “check-the-box” compliance—acknowledges real-world scenarios of digital stalking, doxxing, and emotional manipulation.
• Provides a plan for restoring trust and safety if a breach occurs, including psychological considerations for vulnerable users.

Propose a set of data protection principles that address:

• Consent in power-imbalanced situations—e.g., how to spot when “consent” might not be fully free.
• Data as a tool of power—how to handle it carefully so FIA doesn’t inadvertently replicate the coercion it’s fighting.
• Minimal data collection—prioritizing only what’s absolutely necessary to support women’s agency.

Provide a checklist or template that FIA can use to ensure every new tool or service aligns with these principles.

Deliverables

A comprehensive data privacy policy tailored for FIA’s unique context.

A set of data protection principles rooted in psychological safety and social discernment.

A breach prevention and response plan designed for high-risk, targeted attacks.

A presentation to explain your recommendations, showing how they go beyond compliance to address real-world risks and the lived experiences of FIA’s users.