Cybersafety by Design for Non-Profits was developed by KnowledgeFlow in 2022 as a practical framework to help organizations build safer, more privacy-respectful digital programs. The principles in this document draw on our founder Claudiu Popa’s longstanding work with the Office of the Information and Privacy Commissioner of Ontario, including his contributions to the evolution of both Privacy by Design and the more recent Privacy by ReDesign initiatives. These connections provide a strong foundation for organizations that want to apply recognized privacy principles in ways that are modern, actionable, and relevant to today’s digital environments.

This resource adapts those well-established privacy concepts into seven Cybersafety by Design Principles, tailored for nonprofits, schools, and any organization working with children, youth, families, or other vulnerable communities. The focus is on practical safeguards that reduce the risk of privacy breaches, online abuse, surveillance, exploitation, and other harms—while still supporting positive, engaging digital experiences.

Inside, organizations will find:

• A clear explanation of the 7 Cybersafety by Design Principles and how they apply to real-world programs and platforms
• A Cybersafety Risk Checklist (CRC) for evaluating tools, apps, websites, and learning technologies
• A practical Detect–Correct–Monitor model for strengthening ongoing privacy and safety controls

These tools can be used by:

• School boards designing or assessing student-facing technologies
• Nonprofits supporting children, youth, seniors, or newcomers
• Community organizations building digital services or online programs
• Any group responsible for personal information, especially involving minors

By grounding cybersafety in recognized privacy frameworks, PbD’s proactive, risk-mitigating approach and PbRD’s focus on rebuilding systems to close existing gaps, this resource helps organizations adopt a consistent, modern, and trustworthy approach to protecting the people they serve.