Congratulations to Kim Chandler McDonald, third place winner of the 2024 Risky Women Writing Competition, presented in partnership with Bovill Newgate.
Explore the urgent issue of Technology-Facilitated Domestic Violence (TFDV) and discover how risk and compliance frameworks can be vital tools in combating this growing threat. Learn how businesses can leverage governance to protect vulnerable populations and create safer digital environments. Join us in rethinking compliance as a means to drive positive social impact.
In today’s hyperconnected world, where technology permeates every aspect of our lives, the shadow side of innovation is often left unaddressed. While businesses embrace digital transformation to drive efficiency and growth, these same technologies are being weaponised to perpetrate domestic violence and coercive control in terrifying new ways. Technology-Facilitated Domestic Violence (TFDV) represents a growing risk, not just to individuals, but to the societal and business landscapes we operate within.
At the core of addressing TFDV lies an unlikely set of allies: risk and compliance frameworks. Traditionally viewed as cumbersome business processes, these frameworks are increasingly becoming critical tools in safeguarding vulnerable populations from exploitation and abuse. The question isn’t just how businesses can mitigate their own risks, but how they can take an active role in combating digital violence by embracing governance and compliance systems already in place.
The Expanding Reach of Technology in Domestic Abuse
We often think of domestic violence in terms of physical harm or overt emotional abuse. However, in the digital age, technology has expanded the reach of abusers far beyond physical proximity. Spyware apps, GPS tracking, unauthorised access to private accounts, and social media monitoring are just a few of the tools abusers deploy to exert control over their victims.
What makes TFDV particularly insidious is its stealth. Victims may not even be aware they’re being tracked, surveilled, or manipulated until long after the damage is done. Worse, the platforms and technologies enabling these forms of abuse are often inadequately regulated, leaving victims without recourse and businesses oblivious to the role they are playing in perpetuating harm.
Risk and Compliance: More Than Business Obstacles
When we think of risk and compliance, it’s easy to imagine them as necessary evils—processes that slow innovation, increase costs, or introduce operational friction. But what if we saw them as critical tools in the fight against TFDV?
For organisations handling sensitive data—whether technology companies, financial institutions, or social media platforms—the governance of that data is not just a business requirement but a moral imperative.
In cybersecurity, we increasingly focus on building “digital bodyguards” to protect businesses from external threats. Yet, there is less emphasis on the internal threat posed by lax data governance, which can inadvertently enable abusers. Without robust compliance measures in place, sensitive data can be easily accessed and weaponised by bad actors, whether they are employees, partners, or even intimate partners of victims.
How Risk and Compliance Can Combat TFDV
- Data Governance and Consent: One of the critical aspects of compliance is the protection of personal data, particularly sensitive data. Ensuring that explicit consent is required for data sharing and that there is strict control over how personal data is accessed can provide a crucial line of defense for victims of TFDV. Organisations must take responsibility for safeguarding this data—
not just because regulations like GDPR demand it, but because it is a vital measure in preventing abuse. - Multi-Jurisdictional Compliance: Domestic violence often doesn’t recognise borders, particularly in a digital world. Compliance frameworks must, therefore, account for the multi-jurisdictional nature of technology. With more countries tightening regulations on data privacy, companies must ensure that their risk management strategies are globally comprehensive, providing protection for users regardless of their location.
- Real-Time Monitoring and Incident Response: Risk management tools already allow businesses to monitor for cybersecurity incidents in real-time. These same tools can be adapted to flag suspicious activity related to domestic violence, such as frequent password resets, account takeovers, or GPS tracking requests. Having robust incident response plans that account for the nuances
of TFDV could provide critical interventions when they are needed most. - Embedding Ethical Frameworks into Compliance: Compliance isn’t just about ticking boxes—it’s about doing what’s right. Embedding ethical considerations into compliance frameworks ensures that the protection of vulnerable populations is at the heart of a business’s operations. Whether it’s implementing zero tolerance policies for TFDV on digital platforms or ensuring that security and privacy features cannot be easily bypassed by abusers, businesses must go beyond mere regulatory requirements to create safe environments for all users.
The Responsibility of Tech and Business Leaders
It’s easy to view TFDV as a social issue that exists outside the realm of business. Yet, as we increasingly live our lives online, businesses that manage digital spaces must accept their role in combatting this issue. From building robust privacy settings into social media platforms to ensuring financial institutions protect personal data, businesses must be part of the solution.
Organisations handling sensitive data have a unique opportunity—and responsibility—to create governance frameworks that protect those most vulnerable to abuse. Leveraging risk and compliance systems ensures technologies aren’t being misused and data doesn’t fall into the wrong hands.
The Road Ahead
We are making progress in addressing TFDV, but more must be done. As regulatory frameworks evolve, so too must business practices. By recognising that risk and compliance are not just business necessities but essential tools for protecting vulnerable populations, we can create safer, more secure environments for all users. This isn’t just a compliance issue—it’s a human
one. For businesses, large and small, now is the time to rethink risk and reimagine compliance to drive positive social impact. By doing so, we can not only protect our businesses but also safeguard those who are most at risk.
FROM THE JUDGES
“A totally new topic with little to no awareness. Loved the purpose and passion element ! Excellent!”
“First article I can ever recall seeing on the linkage between domestic violence and GRC, so high originality points from me.”
“This isn’t just a compliance issue—it’s a human one”
“This is a bold subject choice, looking at the intersection of risk & compliance and technology facilitated domestic violence (TFVD). This article gives a nice presentation of how risk & compliance controls around data security can be applied specifically to tackle TFVD.”