Summary

The report’s key recommendations include:

To States and the Human Rights Council

• The Human Rights Council, in its resolution 32/13, condemned unequivocally measures to intentionally prevent or disrupt access to or dissemination of information online in violation of international human rights law, and called upon all States to refrain from and cease such measures. This condemnation, which is critical to the Council’s promotion of human rights online, should be supplemented and specified. Intentional prevention or disruption of access includes any action that shuts down or renders ineffective access to telecommunications networks, mobile services, social media platforms and so forth. Future work of the Council that clarifies the rules that apply to digital access, as outlined in this report, would advance the right to freedom of opinion and expression online.
• It is also critical for the Council and States to draw the connections between privacy interference and freedom of expression. To be sure, interferences with privacy must be assessed on their own merits under article 17 of the International Covenant on Civil and Political Rights and other norms of human rights law. But certain interferences — such as overbroad requests for user data and third party retention of such data — can have both near- and long-term deterrent effects on expression, and should be avoided as a matter of law and policy. At a minimum, States should ensure that surveillance is authorized by an independent, impartial and competent judicial authority certifying that the request is necessary and proportionate to protect a legitimate aim.
• The Special Rapporteur is particularly concerned about reports of threats and intimidation of companies, their employees and their equipment and infrastructure. Also, the Council’s emphasis on the important role — and need for protection — of the private sector deserves consideration. States should review all activities to obtain network access to ensure that they are lawful, necessary and proportionate, paying particular attention to whether these activities are the least intrusive means for protecting a legitimate aim.
• The protective role that States may exercise over the private sector can only go so far. They should not be promoting the economic gain of private entities over users’ rights to freedom of opinion and expression. Thus, States should prohibit attempts to assign priority to certain types of Internet content or applications over others for payment or other commercial benefits.
• The intersection of State behaviour and corporate roles in the digital age remains somewhat new for many States. One profitable way forward, at both the international and domestic levels, would involve the development of national action plans on business and human rights in order to establish meaningful avenues for all categories of the digital access industry to identify and address their respective human rights impacts.

To private actors

• For years now, individuals and companies within the digital access sector have understood that they play an essential role in the vast expansion of access to information and communications services. They are in a business in which the model for success should involve expanding access, efficiencies, diversity and transparency. They should take the principles identified in the present report as tools to strengthen their own roles in advancing users’ rights to freedom of expression. In this spirit, in addition to high-level policy commitments to human rights, the industry should allocate appropriate resources towards the fulfilment of these commitments, including due diligence, rights-oriented design and engineering choices, stakeholder engagement, strategies to prevent or mitigate human rights risks, transparency and effective remedies. In doing so, the design and implementation of corporate human rights accountability measures should draw on both internal and external expertise, and ensure meaningful input from customers and other affected rights holders, civil society and the human rights community.
• This is not to say that private companies do not face pressures. They do. But when States request corporate involvement in censorship or surveillance, companies should seek to prevent or mitigate the adverse human rights impacts of their involvement to the maximum extent allowed by law. In any event, companies should take all necessary and lawful measures to ensure that they do not cause, contribute or become complicit in human rights abuses. Arrangements with corporate partners should be structured to ensure that all parties uphold their human rights responsibilities. Companies should also seek to build leverage in pre-existing business relationships to prevent or mitigate adverse human rights impacts.

Supplementary material and submissions to the report:

Supplementary material, including summary of consultations, accompanying the report is available online as an addendum to the report.