---
schema_version: "1.0.0"
id: "ddf-church-blueprint:en:chapter-23"
work_id: "urn:systemstheology:book:ddf-church-blueprint:chapter:chapter-23"
book_id: "ddf-church-blueprint"
chapter_id: "21-the-church-online-and-the-data-it-keeps"
chapter_slug: "chapter-23"
title: "21. The Church Online and the Data It Keeps"
book_title: "DDF Church Blueprint"
language: "en"
source_language: "en"
translation_status: "source"
authors: ["Systems Theology"]
editorial_owner: "Systems Theology"
editors: []
review_status: "not_specified"
reviewers: []
content_version: "content-c28b4545ec94"
content_hash_sha256: "c28b4545ec946250448d33b72a8583c48132aa198694fd57866daa9313fec180"
published_at: "2026-07-15T21:14:45.000Z"
modified_at: "2026-07-15T23:50:19.254Z"
canonical_url: "https://systemstheology.com/library/ddf-church-blueprint/chapter-23/"
markdown_url: "https://systemstheology.com/research/books/ddf-church-blueprint/en/chapter-23.md"
license: "All rights reserved; research use subject to the Use Policy"
license_url: "https://systemstheology.com/use-policy/"
correction_url: "https://systemstheology.com/library/ddf-church-blueprint/chapter-23/#chapter-comments"
---
# 21. The Church Online and the Data It Keeps
Digital tools can extend communication, Scripture access, participation, care, administration, and public witness. They can also collapse distance, confidentiality, attention, consent, and role boundaries. A livestream is not the gathered Church simply because people watch it. It may be a real channel of teaching, prayer, and connection for people who cannot be present. Name both its gift and limit.
## Tell the Truth Online
Publish current service times, location, confession, leadership, affiliation, children and access information, contact, protection and complaint routes, privacy notice, and what a visitor can expect. Remove ministries that no longer exist. Do not claim outcomes, diversity, comprehensive counseling, or community reach the plant cannot support.
Public communication should distinguish gospel proclamation, pastoral counsel, organizational news, personal opinion, political statement, and crisis update. Name who may speak for the church. A leader's personal account can still carry office power; a disclaimer does not erase the relation.
## Collect Less, Hold It Better
Create a data inventory: what is collected, why, legal or ecclesial basis, whose data it is, where it lives, who can see it, how long it is kept, who receives it, how it is corrected or deleted, and what happens after a breach. Separate ordinary contact, giving, membership, child, pastoral, personnel, clinical, discipline, and safeguarding information. Convenience is not a reason to give every leader access.
Use individual accounts, strong authentication, minimum permissions, managed devices where risk requires, backups, prompt offboarding, vendor review, and a breach response. Do not send protected details through group text, personal email, or prayer chains. Do not store the only record on a pastor's phone.
NIST privacy guidance and W3C accessibility standards can help a team ask better technical questions. They do not define ecclesiology, and legal duties vary. Their field insight is useful: privacy risk belongs to the whole data processing relation, and inaccessible digital content can exclude people as effectively as a physical barrier.
## Images, Stories, and Livestreams
Obtain meaningful consent for identifiable stories and images. Child consent requires the proper guardian process and age-appropriate assent, with safety exceptions. Provide no-camera areas and a way to participate without becoming content. A person may withdraw future use even when lawful prior use cannot be erased from every archive; explain the actual limit.
Livestream framing should not expose children, people receiving prayer, protected participants, empty seats used to shame attendance, or conversations after worship. Delay or disable streams when safety requires. Copyright, license, platform, and archive choices need named ownership.
## Communication under Pressure
Prepare templates and authority for weather closure, medical incident, safeguarding allegation, leader absence, data breach, public controversy, death, and facility loss. The first message should state what is known, what is not known, what action is underway, where help or reporting can be reached, and when the next update is expected. Do not speculate, blame, announce protected identities, or use prayer language to avoid facts.
Silence can protect a process; silence can also protect an institution. Record the reason, authority, and review time when communication is withheld.
Before you move on. A digital-publication rule, communications authority map, data inventory and retention schedule, access-control review, image and livestream consent process, accessibility check, and crisis-communication kit.
Field phase: Form, Care for, and Send a People