Skip to content
The Digital Harm Project

By role

Guides for the people most often called to act.

The research sets out what the evidence says, and Chapter 08: Recommendations distills it into recommendations by audience. These guides are the operational companions to those recommendations — the step-by-step version for the people most likely to need it in the moment, from parents and survivors to school staff, clinicians, platform teams, and attorneys.

  1. For

    Parents & caregivers

    For Parents

    A calm, practical guide for protecting your child without needing to be a tech expert — built on the finding that an open, non-shaming relationship is the single biggest protective factor.

    • Age-by-age conversations about pornography and online sexual risk, from under-5 through the teen years
    • Sextortion — the threat that has surged against teens — with the exact script to give your child in advance and the warning signs to watch
    • How grooming actually works, and how the same open relationship defends against it
    • Device setup as guardrails (not a substitute), and a clear what-to-do path if something happened: preserve, report, take it down, and tend to the child
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  2. For

    PTA & parent-teacher groups

    For PTA Groups

    The organizer's playbook for the PTA president who has become the first person scared parents ask about AI and child safety — how to run one good parent conversation and route the whole community, without being an expert.

    • The genuinely new risk, named plainly: AI-made sexual images created by kids, about kids — and why it's a crime
    • Why 'just ban AI' isn't a plan, and the guardrails-plus-literacy framing to bring to your school
    • A ready-to-run 75-minute parent-night agenda, and language that informs without clearing the room
    • The questions parents will ask you with short answers, community device ground rules, and what to do if it happens at your school
    Read the Guide
  3. For

    Anyone who finds CSAM or abuse

    For Reporting Content

    A verified directory of where to report child sexual abuse material and abusive content across 114 platforms and the clearinghouses — each with its reporting channel, illegal-content policy, and US ESP reporting-duty status. If you don't know or don't trust the platform, report straight to a clearinghouse.

    • The two reporting paths: a platform's own abuse channel, or a clearinghouse like NCMEC's CyberTipline that routes to law enforcement and to the platforms
    • 114 platforms across social, messaging, AI image and video generators, cloud storage, forums, infrastructure, adult, gaming, and app stores and payment
    • Clearinghouses of first resort: NCMEC, IWF, Cybertip.ca, INHOPE, the Australian eSafety Commissioner, and the FBI
    • Safety notes: you don't need to confirm content is CSAM before reporting, and never download or screenshot suspected material to "preserve evidence"
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  4. For

    Survivors and victims

    For Survivors

    Survivor-centered guidance for people who have experienced sexual abuse, image-based abuse, sextortion, or grooming — at any point, recent or historical.

    • Five things people often need to hear first, then practical paths through removal, reporting, and therapy
    • Take It Down and StopNCII.org for circulating imagery, with honest framing about what can and can't be removed
    • Trauma-informed care: the modalities (EMDR, TF-CBT, IFS, somatic, prolonged exposure) and the directories that find them
    • Section for the partners, parents, and friends supporting a survivor — including the secondary-trauma research
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  5. For

    School staff

    For Educators

    Practical playbooks for administrators, teachers, and school counselors handling the situations they're likely to encounter unprepared.

    • Six common scenarios with first steps, what not to do, sample language, who to involve, and refer-to links
    • Pornography on a school device · image-based abuse · sextortion · AI deepfakes · grooming · compulsive use
    • Universal principles, mandatory-reporting context, curriculum recommendations
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  6. For

    People seeking help

    For People Seeking Help

    Honest, non-judgmental guidance for people concerned about their own sexual thoughts, struggling with CSAM use, or already facing legal trouble. The most important first step is rarely the one shame is pointing at.

    • Confidentiality realities: what is privileged, what triggers mandatory reporting, and how anonymous prevention services close the gap
    • Steps before charges: Troubled Desire, Stop It Now!, evidence-based treatment (CBT and ACT)
    • Steps after charges: criminal defense first, treatment for mitigation, the Risk-Need-Responsivity model
    • Honest answers to the questions people in this situation actually ask
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  7. For

    Founders, CTOs, T&S leadership

    For Tech CEOs

    Operational guide for platforms that host user content and teams building AI image and video generation. What the legal floor actually requires, the minimum viable detection stack, and where executives face personal exposure.

    • Section 230's carve-out for federal child exploitation law (18 U.S.C. § 2258A), ENFORCE Act, TAKE IT DOWN Act
    • Minimum viable stack with PhotoDNA, NCMEC Hash Sharing API, CyberTipline reporting, Cloudflare's free scanner — and the open-source PDQ/TMK alternative
    • Scale-up layer: Thorn Safer, Hive AI, Project Arachnid Shield API
    • AI-generation-specific obligations: training-data hygiene, prompt and output filtering, provenance signals, criminal-equivalent treatment under the ENFORCE Act
    • Personal-liability landscape, the Apple NeuralHash cautionary tale, and a what-to-do-tomorrow checklist
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  8. For

    Engineers building protection

    For Developers

    The hands-on implementation companion to the technology chapter and the open-source toolkit — how to actually wire up CSAM detection, and the one handling rule that turns good intentions into criminal exposure if you get it wrong.

    • The four-stage pipeline (ingest, hash, match, act) and where each stage runs
    • Perceptual vs cryptographic hashing: PhotoDNA, the open PDQ/TMK alternative, and the hashkit crate
    • Matching the NCMEC and IWF hash lists with multi-index hashing — never building your own corpus
    • Handling a match without mishandling the file, AI-generation safeguards, testing without real material, and a first-week build sequence
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  9. For

    Licensed mental-health clinicians

    For Therapists

    Clinical guide for psychologists, LMFTs, LCSWs, psychiatrists, and counselors with patients across problematic pornography use, sexual-trauma recovery, pre-offense concerns, or active CSAM legal exposure.

    • The screening question to add at intake and the confidentiality conversation to have in session one
    • CBT vs ACT for problematic pornography use, with effect sizes from the 2025 meta-analysis
    • Trauma-informed modalities (EMDR, TF-CBT, IFS, somatic, prolonged exposure) and the phase-based model
    • The therapeutic-vs-forensic role distinction, the Dunkelfeld/Troubled Desire prevention model, pharmacology, and clinician self-care
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  10. For

    Compliance, T&S ops, legal, audit

    For Compliance Teams

    The documentation, audit, and process companion to the executive guide. Regulatory mapping across US, EU, UK, and Australia; the metrics that hold up at audit; vendor due-diligence; records retention; a 90-day buildout sequence for teams starting late.

    • Multi-jurisdictional regulatory map: 18 U.S.C. § 2258A, ENFORCE Act, TAKE IT DOWN Act, DSA, Online Safety Act, Australian eSafety
    • Audit checklist: detection coverage matrix, hash-list provenance, CyberTipline reporting evidence, takedown SLA, moderator wellbeing, records retention, incident-response runbook
    • Metrics that hold up: TTD/TTT/TTR, false-positive rates, appeals reversal, categorization caveats per the Stanford CIS finding
    • Vendor due-diligence questionnaire and the eight internal policy documents auditors expect to find
    Read the Guide

    ↘ The recommendation behind this guide, in the research

  11. For

    Defense counsel & prosecutors

    For Attorneys

    Evidence-based context for attorneys representing clients in CSAM cases — recidivism data with the necessary caveats, risk-assessment instruments that hold up at trial vs. those that don't, treatment programs that matter for mitigation, and the AI-generated CSAM legal landscape.

    • The Clark et al. 2025 recidivism numbers paired with the Seto self-report gap
    • Static-99R and Stable-2007 as defensible; AASI-3 validity controversies for cross-examination
    • Specialized treatment programs (Inform Plus, i-SOTP, CEM-COPE, Dunkelfeld) vs. generic SOTPs
    • ENFORCE Act, TAKE IT DOWN Act, US v. Anderegg, and the Stanford CIS finding on CyberTipline data integrity
    Read the Guide

    ↘ The recommendation behind this guide, in the research

Beyond the guides