diff --git a/README.md b/README.md
index e028bf4..fabbaeb 100644
--- a/README.md
+++ b/README.md
@@ -43,6 +43,7 @@ reference. Look for [brackets].
 - [Considered alternatives](#considered-alternatives)
   - [[Alternative 1]](#alternative-1)
   - [[Alternative 2]](#alternative-2)
+- [Security and Privacy Considerations](#security-and-privacy-considerations)
 - [Stakeholder Feedback / Opposition](#stakeholder-feedback--opposition)
 - [References & acknowledgements](#references--acknowledgements)
 
@@ -154,6 +155,13 @@ and why you decided against it.]
 
 [etc.]
 
+## Security and Privacy Considerations
+
+[Describe any interesting answers you give to the [Security and Privacy Self-Review
+Questionnaire](https://www.w3.org/TR/security-privacy-questionnaire/) and any interesting ways that
+your feature interacts with [Chromium's Web Platform Security
+Guidelines](https://chromium.googlesource.com/chromium/src/+/master/docs/security/web-platform-security-guidelines.md).]
+
 ## Stakeholder Feedback / Opposition
 
 [Implementors and other stakeholders may already have publicly stated positions on this work. If you can, list them here with links to evidence as appropriate.]