Personal Data Protection
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The U.S. Citizenship and Immigration Services (USCIS), under the Department of Homeland Security, is conducting market research through a Sources Sought / Request for Information (RFI) for Personal Data Protection services. This initiative seeks to identify vendors capable of providing an Online Privacy and Protection Program (OP3) to safeguard approximately 22,000 USCIS employees and their families from doxxing and other online threats by identifying, removing, and continuously monitoring Personally Identifiable Information (PII) across the internet, social media, deep web, and dark web. Responses are due by June 24, 2026, at 10:00 AM ET.
Purpose & Scope
USCIS aims to secure contractor support for OP3 services to mitigate the risk and impact of online harassment and exposure. The program will involve proactive PII removal, reactive incident response, continuous threat monitoring, and digital forensic searches. The objective is to protect USCIS personnel and their families by removing PII from online sources and providing ongoing surveillance for potential threats. Services must be scalable to support approximately 22,000 USCIS employees, with each enrolled individual receiving one year of continuous monitoring.
Key Requirements
- Proactive PII Removal: Identify and remove employee PII from public internet, deep/dark web, social media, and non-US platforms.
- Reactive Incident Response: Address doxxing incidents and exposed personal information.
- Continuous Monitoring: Surveillance of internet, social media, deep web, and dark web sources for unauthorized disclosures and threats.
- Digital Forensic Searches: Identify threats and malicious activity.
- Reporting Capabilities: Provide incident tracking, remediation, effectiveness, and agency threat posture.
- Compliance & Safeguards: Adherence to federal privacy and security requirements, with administrative, technical, and physical safeguards for sensitive information.
- Training & Support: Offer training and support for affected personnel.
Submission Details
Vendors are requested to submit written responses, limited to 10 pages, addressing their availability and capability concerning the draft Performance Work Statement (PWS). Responses should also include recommendations for suitable contract types and CLIN structures, and address specific questions regarding:
- Experience with government agencies.
- Additional services like identity protection/restoration.
- Reporting mechanisms, pricing models, and response times.
- PII removal capabilities, compliance, and safeguards.
- Training, service limitations, company size standard, and availability on contract vehicles.
Contract & Timeline
- Opportunity Type: Sources Sought / Request for Information (RFI)
- Product Service Code (PSC): R499 (Other Professional Services)
- NAICS Code: 541990 (Other Professional, Scientific, and Technical Services)
- Set-Aside: None specified
- Response Due Date: June 24, 2026, 10:00 AM ET
- Published Date: June 10, 2026
Evaluation
This RFI is for market research purposes only. Responses will be utilized to determine industry capabilities, potential small business participation, and to refine future solicitation requirements. This notice does not constitute a solicitation or guarantee an award.
Contact Information
For inquiries and submissions, please contact Yamitza Ortiz at Yamitza.M.Ortiz@uscis.dhs.gov.