Executive Summary

Data weaponization has emerged as a key instrument in the toolbox of malicious actors and individuals who exploit sensitive information and intimate images to harm their targets. The intersection of data and gender leads to serious consequences that perpetuate inequality, undermine security, and restrict access to essential services.

The research follows four factors—data, control, perception, and access—that explain why and how certain types of data weaponization inflict gender-specific harm. The observed cascading and compounding dynamics demonstrate how one form of gendered harm can trigger another, aggravating the overall negative impacts. As a result, victims can become trapped in a cycle of harm, where the initial harm leads to deeper and more acute harms. The analysis across all four factors highlight the following themes:

• Gendered harm is both contextual and intersectional. The context is formed by policy and legal frameworks, gender norms and roles imposed by society and the state, access to services, social and family structures, and the environment. Victims’ gender and intersecting identities, such as sexuality, race, employment, and visibility, further influence the type, likelihood, and intensity of harm.
• The online and offline dimensions of gendered harm are deeply interconnected. Although data exploitation occurs in the digital realm, it intersects with offline events and experiences. The far-reaching repercussions extend into both spheres, reinforcing each other. This interconnectedness underscores the pervasive nature of gendered harm.
• Harm from data weaponization poses critical challenges to democracy and national security. The increasing frequency, scale, and impact threaten individual rights and exacerbate broader security risks. Attacks that exploit gender can hinder participation of women and gender and sexual minorities in public life, eventuating into a democratic deficit. Such exploitation can also lead to discriminatory access to services and mistrust in platforms, further excluding targeted groups and individuals from engaging in society on equal footing.

Current policies and legal frameworks fail to effectively address the gendered dimensions of data weaponization. Cumbersome legal responses to rapidly evolving tactics, lack of state capacity to address harmful practices, and insufficient victim support mechanisms contribute to the underreporting and under-addressing of gender-specific harms. Existing frameworks often overlook the intersectional impacts of data breaches and multiple data exploitations, limiting the effectiveness of policy and technology responses. The absence of disaggregated data and established methodologies further hinders the documentation, quantification, and qualification of gendered harm, obstructing to identify and substantiate aggregate trends.