Project
At-Risk Users
Last updated September 2026
At-risk users are people who experience elevated digital security, privacy, and safety threats because of what they do, who they are, where they are, or who they are with.
By understanding the security, privacy, and digital safety needs of these users, we are able to understand how modern technology products buckle or fail for users who may be at risk of some of the most severe harms. Sunny Consolvo led this portfolio within Google, tirelessly pushing for research that would meet the needs of these groups under Google Privacy UX’s emerging harms pillar. Over the last decade we’ve done research with survivors of intimate partner abuse, journalists, activists, content creators, political campaign staff, and more.
In 2022, we published a framework for thinking about everything we, and others, have learned about the varied people who are more vulnerable to harm or for whom harms may be more severe. Instead of only looking at each at-risk community individually, our taxonomy of 10 contextual risk factors allows us to align findings across the 85 studies we systematized. We see this as an important, foundational step in organizing the community of researchers who work with at-risk populations towards solutions that can scale to many groups.
In 2026, with the support of our amazing intern Sharon Heung, we published a 5000 person survey of Americans as a first attempt at measuring prevalence: how many people believe they are at higher risk of digital harm, across the entire population, using those 10 contextual risk factors.
Overall, ~84% of respondents had high agreement with at least one risk factor (high agreement was self reported 7+ on a 1/10 scale.) On average participants self-identified with three risk factors. Half the population felt they were too resource & time-constrained to deal with digital safety attacks.
Also after a decade of doing this work, we wrote a piece summarizing that time. Here we’re sharing, not just our research efforts, but what we learned from working with product teams and our internal class: Designing For At Risk Users, which we taught to thousands of Googlers.
To help others do work with at-risk populations, we, in collaboration with researchers at Cornell Tech, the University of Maryland, and others, wrote a paper on strategies for conducting this type of work, based on these lessons learned.
Work in this project
- 2021"Why wouldn't someone think of democracy as a target?": Security Practices & Challenges of People Involved with U.S. Political Campaigns · Proceedings of the 30th USENIX Security Symposium, 2021 · USENIX Security Distinguished Paper Award
- 2022"It's common and a part of being a content creator": Understanding How Creators Experience and Cope With Hate and Harassment Online · Proceedings of the ACM CHI Conference on Human Factors in Computing Systems (CHI '22), New Orleans, LA, 2022
- 2022SoK: A Framework for Unifying At-Risk User Research · Proceedings of the IEEE Symposium on Security and Privacy (S&P '22), San Francisco, CA, 2344–2360, 2022
- 2023"Millions of people are watching you": Understanding the Digital-Safety Needs and Practices of Creators · Proceedings of the 32nd USENIX Security Symposium, Anaheim, CA, 5629–5645, 2023
- 2024SoK: Safer Digital-Safety Research Involving At-Risk Users · Proceedings of the IEEE Symposium on Security and Privacy (S&P '24), San Francisco, CA, 2024
- 2025Supporting the Digital Safety of At-Risk Users: Lessons Learned from 9+ Years of Research and Training · ACM Transactions on Computer-Human Interaction (ToCHI), 32(3):22:1–22:39, 2025
- 2026Who Is At Risk? Examining the Prevalence of Digital-Safety Attacks and Contextual Risk Factors in the United States · Proceedings of the ACM CHI Conference on Human Factors in Computing Systems (CHI '26), Barcelona, Spain, 1214:1–1214:30, 2026
- digital safety
- privacy
- security
- at-risk users