What happened
The Electronic Frontier Foundation and The Trevor Project provide practical steps for LGBTQ+ people to protect their personal information online. Advice includes limiting disclosure of identifying details, using avatars, disabling EXIF data, and enabling two-factor authentication. The guidance also suggests reviewing app permissions and privacy settings regularly.
Why it matters for trust and compliance
- Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
- The guidance helps LGBTQ+ individuals reduce exposure to doxxing and outing risks by improving personal data control and security practices.
Who is affected
Electronic Frontier Foundation The Trevor Project
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Revisit retention schedules and data minimisation for the data involved.
- Map the security requirements to existing controls and close gaps.
- Review age assurance and protections for minors' data.