Personal Data Protection

USCIS is issuing a Sources‑Sought notice (Solicitation 70SBUR26I00000019) to assess market capability for an Online Privacy and Protection Program (OP3) that will safeguard approximately 22,000 USCIS employees and their families from doxxing and other internet‑based threats. The contractor must provide proactive removal of personally identifiable information (PII) from open‑web, social‑media, deep‑web and dark‑web sources, continuous monitoring of those environments, and rapid incident‑response and digital‑forensic investigations when exposures occur. Services are required for a one‑year monitoring period per enrolled individual and must scale to cover the entire workforce. Key deliverables include an Initial Implementation Plan, quarterly Threat‑Mitigation Recommendations, an Annual Performance Report, training materials on doxxing awareness, a Final Closeout Report, and mandatory Vulnerability Assessment Reports (upon enrollment and annually). The contractor must also supply real‑time Monitoring Alerts, PII‑Removal Confirmation documentation, a Monthly Summary Report, and a reporting interface that tracks total enrollments, threat alerts, employee security reports, actions taken, and overall threat posture. Responses are due by 10:00 a.m. ET on 24 June 2026; point of contact is Rachel M. Turner (rachel.m.turner@uscis.dhs.gov, 802‑872‑4131). NAICS 541990 applies.

Notice ID

efcf20158a764552bfc33ff2411df934

Solicitation Number

70SBUR26I00000019

NAICS Code

541990

Classification Code

R499