Personal Data Protection

The U.S. Citizenship and Immigration Services (USCIS) is conducting market research through a Request for Information (RFI) to identify qualified contractors capable of delivering comprehensive Online Privacy and Protection Program (OP3) services to safeguard approximately 22,000 employees and their families from doxxing and other online threats. The core objective is to proactively identify, remove, and continuously monitor personally identifiable information (PII) across the open internet, social media platforms, deep web, and dark web, with the goal of reducing the risk and impact of online harassment and exposure. Services must include digital forensic searches to detect malicious activity, reactive incident response to doxxing events, and one year of continuous monitoring for each enrolled individual, starting from the date of service activation. The contractor is expected to deliver a full suite of deliverables including an initial implementation plan, vulnerability assessment reports, real-time monitoring alerts, PII removal confirmations, monthly and annual performance summaries, threat mitigation recommendations, training materials for employees, and a final closeout report, all tailored to support federal privacy and security mandates under 18 U.S. Code § 119. The requirement is classified under NAICS code 541990, and vendors must demonstrate relevant experience in doxxing protection, identity restoration, and PII removal services, particularly within government or similarly sensitive environments. Proposals must include detailed information on technical capabilities to identify and erase PII globally, including non-U.S. websites, along with response times, scalability for the full workforce, and pricing models such as subscription or per-incident options. Vendors are required to provide evidence of compliance with federal privacy standards through administrative, technical, and physical safeguards, and to disclose their size status under SBA guidelines, including any socio-economic certifications. While no formal contract terms, pricing structure, or evaluation criteria have been established at this stage, the government is soliciting input on optimal contract types and CLIN structures. Responses are limited to ten pages and must be submitted by 10 a.m. Eastern Time on June 24, 2026. The place of performance is Camp Springs, Maryland, and primary points of contact are Rachel M. Turner and Yamitza Ortiz of the USCIS Contracting Office in Williston, Vermont. All necessary personnel, equipment, and management resources are the vendor’s responsibility, except for government-furnished information.