"Digital Marketing": An abstract illustration of a megaphone, mobile phone, and target

“Digital Marketing” by Wichai Wi from the Noun Project. (CC BY)

Last month, AT&T announced that it may soon roll out a new, low-cost mobile internet plan subsidized by advertising. This came as no surprise to the RDR research team: We’ve been tracking telecommunications companies’ steady push into the mobile ad market for nearly two years.

In the 2020 RDR Index (due out in February 2021), we will rank telcos and digital platforms on a new set of indicators measuring corporate policies and practices around targeted ads.

This move by AT&T is part of an industry-wide trend by telcos to jump into the digital ad market that up to now has been dominated by digital platforms like Google and Facebook. All of the telecommunications companies we rank have ventured into the mobile ad market, tapping into the troves of data and insights they have on their customers in an effort to compete with digital platforms for a slice of the lucrative digital advertising pie.

While digital platforms have been in the much-deserved hot seat for building a business model that trades on user data for profit, telcos thus far have slid under the radar for cashing in on this very same model.

Telcos profit from this data in a variety of ways, only some of which are known to the public. We know that they serve ads to their subscribers via SMS networks, and that they sell user data to third-party ad companies that can influence what kinds of ads subscribers might see on other digital platforms or apps. And we suspect that AT&T’s proposed plan would compound this issue by effectively putting a price on privacy, leaving low-income consumers likely to opt for a mobile plan that subjects them to additional targeted advertising.

All told, we worry that the targeted advertising practices of telcos are no less harmful than those used by digital platforms like Google and Facebook.

For these and other reasons, our new research indicators on targeted advertising are industry-agnostic: We apply them to every company we rank that engages in or enables any type of targeting, and to every company that shares or sells user data and insights to third parties for any type of advertising or sponsored content.

Yet some of the telcos we rank have pushed back on our approach. When we’ve asked for their feedback on our preliminary research, some company representatives have argued that RDR should not evaluate telcos on our targeted advertising indicators—at least not in the same way as digital platforms. They say their SMS-based ad services are more limited in scale and fundamentally different in substance—and less risky, from a human rights perspective—than the kind of ad targeting that is happening on social media and other digital platforms.

The implication is that they are engaged in a more benign form of ad targeting that simply connects commercial retailers with potential customers through SMS-based ads that market footwear or face cream, for example. But they aren’t telling us precisely how ads are bought and sold, or how users’ data is changing hands along the way. We don’t know what we don’t know. But we do know the devil is often in the details.

We recognize that targeting a group of users who might be interested in buying new running shoes is not the same thing as targeting a segment of the population with political messages that could influence who people vote for. But the road from commercial advertising to political disinformation is pretty short: Just ask Facebook, which originally jumped into the online ad game to serve as a platform for retailers and is now one of the planet’s dominant vehicles for political messaging and targeting—with all the problems that this has brought. Indeed, for political campaigns, SMS messaging is gaining ground in the U.S., and has been a major force in other countries like India for the past few years.

Perhaps even more important is the fact that most telcos today are not simply offering SMS-based ads to commercial marketers. They are also selling or sharing user profiles and data with other parties. Data brokers, ad networks, and even political operatives then use that information to target specific individuals with personalized ads on other platforms and around the web. These practices could incur significant harms, putting users’ human rights at risk.

For all these reasons, we expect digital platforms and telcos alike to conduct human rights risk assessments on how their targeted advertising policies could harm the right to information, the right to privacy, and how they could be discriminatory—and to take steps to mitigate those harms. We expect companies to clearly disclose what types of ad targeting is not permitted—including listing restrictions against using certain audience categories, like race, gender, or political affiliation. We expect companies to offer users the ability to opt-in to whether they are targeted at all—targeting should be off by default—and we expect companies to give users the ability to control how their data is being used and shared with any third party that can exploit that information for targeting purposes.

When we pilot tested our indicators on targeted advertising last spring, we even found that telcos are far less transparent about these policies than digital platforms—and yet the human rights risks of their targeted advertising practices are equally grave. These initial findings affirmed our position that telcos need to be held to the same transparency and accountability standards about their targeted advertising policies and practices as digital platforms.

Apple store in Hong Kong

The Apple Store in Hong Kong. Photo by Robert Pastryk via Pixabay, labeled for reuse.

This is the RADAR, Ranking Digital Rights’ bi-monthly newsletter. This edition was sent on October 9, 2020. Subscribe here to get The RADAR by email.

As the U.S. general election approaches, digital disinformation and targeted political ads are fueling debates among policymakers and politicians of all stripes.

At RDR, we’re looking closely at what drives these things—chiefly, big tech companies’ pervasive collection of user data. While Facebook and Google are front and center in the public conversation, they aren’t the only players deciding the fate of our digital data.

For iOS users, Apple holds plenty of power too. We were heartened this past summer when the company announced plans to roll out a suite of anti-tracking measures for iOS 14, marking a big win for user privacy. The widespread corporate practice of tracking users’ online activity without their informed consent violates the fundamental human right to privacy, and enables data-driven discrimination.

But soon thereafter, app developers and major companies—Facebook among them—began complaining that the changes would put a dent in their advertising revenues. In September, Apple decided to postpone the changes until 2021, leaving iOS users vulnerable to tracking during this critical time.

This week, we published a joint letter urging Apple CEO Tim Cook to implement the anti-tracking measures immediately. Human Rights Watch, Amnesty International, the Electronic Frontier Foundation, and other leading NGOs were among the signatories. We closed the letter arguing that “implementing and fully enforcing this policy would position Apple as a standard-setter in the industry.”

And we know that Apple wants to be exactly that. In September, the company made headlines with its first-ever explicit commitment to uphold human rights across its operations, from policies for users to its hardware supply chain. This was big news, especially coming from the most valuable publicly traded company in the world. But it has been a long time coming!

For three years, our researchers have been sounding the alarm on Apple’s failures in this realm. While it has taken some steps to build and publish policies on privacy and security, the company had never committed to upholding freedom of expression, until now. This is why Apple has ranked last among U.S. companies evaluated in the RDR Index every year since 2017.

The downstream effects of these decisions have had real consequences for users, especially in greater China, where hundreds of apps —including apps for the New York Times, Quartz, and a Hong Kong protest-mapping app—have been censored from the App Store. Despite strong media coverage and public condemnation, the company has never published its policies governing App Store (or other content) removals, or met other key human rights benchmarks in this area.

Alongside RDR, other NGOs and even shareholders have been pushing to change this. In February 2020, the UK-based advocacy group SumofUs helped to organize and put forth a shareholder resolution—citing RDR’s 2019 evaluation of Apple—that would have required Apple’s board of directors to report annually on the company’s policies on freedom of expression and access to information. The measure was defeated but received more than 40 percent of votes cast, effectively putting the company on notice.

The Financial Times described the resolution as a major driver of Apple’s new human rights policy, and also mentioned RDR’s role in the change. All told, these forces—big public reactions to censorship, impact-oriented policy research, civil society advocacy, and shareholder pressure—came together and pushed Apple to change its ways. This is our theory of change in action.

The company’s published policy committing to uphold human rights is a huge measure of progress. But the strongest test of this commitment will be Apple’s actions moving forward.

RDR Director Jessica Dheere. Photo by Dan Jones.

Leadership transition: Changes are happening at RDR!
Jessica Dheere was promoted to director from deputy director in September 2020. Rebecca MacKinnon will stay on as founding director into 2021.

“I’m both honored and excited to carry this vision forward with our remarkable team,” Dheere said in New America’s official announcement. “We see 2021-22 as a time for us to bring our rich body of research and policy recommendations to bear as technology companies continue to play a pivotal role in the protection of human rights, civil liberties, free and fair elections, and democratic institutions.”

Write to her at dheere@rankingdigitalrights.org and follow her on Twitter at @jessdheere.

Fall 2020 Investor Update: Geopolitical risks are rising—and regulation is coming
Hot off the presses this week is our Fall 2020 Investor Update, which gives investors a close look at key digital rights concerns and questions to ask in 2021. This edition highlights proposals from shareholders at Apple, Facebook, and Alphabet that addressed digital rights issues—there were 12 of these in 2020, including four that cited 2019 RDR Index findings. It also looks at Facebook’s business model and the recent #StopHateForProfit ad boycott, Twitter’s summer security breach, and the unique risks that foreign companies face when operating in China.

Our take on Trump’s attempt to ban TikTok and WeChat

The administration’s executive orders banning Chinese-owned platforms, and other policies that would have the effect of carving up the internet along national borders, are no way to protect users’ security or other human rights. In an interview with Forbes, RDR Founding Director Rebecca MacKinnon compared Trump’s efforts to China’s internet censorship regime, the so-called “Great Firewall.”

Prior to the September rulings by federal judges blocking Trump’s TikTok and WeChat bans on First Amendment grounds, we urged both Google and Apple—whose app stores control access to both apps—to push back against the order. After all, both companies publicly commit to conducting due diligence on government demands to censor content, and to resisting overly broad demands like these.

But it’s not all bad. In an opinion piece for Slate, MacKinnon offered some reassurance (she says it’s not too late to save the internet!) and concrete solutions to these problems, starting with strong laws protecting privacy and mandating corporate transparency.

YouTube screenshot of virtual panel discussion

So Long Internet, Hello Internets: Rebecca MacKinnon, Ann Marie Slaughter, Madhulika Srikumar, and Joshua Keating discussed the #DividedInternet at a virtual event hosted by New America and Slate’s Future Tense project.

Protests, network shutdowns, and our call for transparency at Africa’s largest telco
Protest movements sometimes inspire governments—like that of Alexander Lukashenko in Belarus—to shut down social media platforms, in hopes of quelling demonstrations. But do these shutdowns actually achieve the desired effect?

“Rarely do we actually see a shutdown being followed by a complete drop-off in the number of protests,” said RDR Company Engagement Lead Jan Rydzak, in a VICE interview about a report he recently co-authored. “It’s about creating an atmosphere of fear and uncertainty,” he told VICE. When shutdowns do happen, telcos are usually the ones to pull the plug. In these situations arise, RDR pushes companies to explain the circumstances under which they shut down or restrict access to the network.

In South Africa, Ralph Mupita recently became the new CEO of telecommunications giant MTN, which serves more than 20 countries in Africa and the Middle East. RDR joined a coalition letter to Mupita that highlighted MTN’s poor performance in the RDR Corporate Accountability Index, due in part to the company’s role in facilitating government-mandated internet shutdowns. The letter, alongside an op-ed for Business Day, by Access Now’s Berhan Taye, urges Mupita to make good on the company’s human rights commitments by improving transparency and engagement with civil society.

Ad transparency is vital to democracy: Our submissions to the DSA
Since our last edition, we’ve made two contributions to the European Commission’s public consultation on the Digital Services Act (DSA)—a forthcoming package of rules that will address the legal responsibilities of platforms regarding user content, ads, and more. In our solo submission, we called for universal transparency by default for all online ads. And in a joint submission with Global Partners Digital, we voiced concern that certain aspects of the DSA pose a risk to individuals’ digital rights and are inconsistent with EU member states’ international human rights obligations.

The scan: What we’re reading
The summer culminated with two knockout stories citing leaked internal communications from Facebook confirming widespread suspicions—and our own research findings—that Facebook’s approach to addressing users’ grievances needs work. The Verge offered a trove of comments from company-wide discussions, exhibiting employee concerns about Facebook’s content moderation practices, among other things.

BuzzFeed exposed a 6,600-word memo from fired Facebook data scientist Sophie Zhang, who wrote that in reviewing problematic content from around the world, she had “made decisions that affected national presidents without oversight, and taken action to enforce against so many prominent politicians globally that I’ve lost count…”

Final pings

 

Put us on your radar! Subscribe to The RADAR to receive our newsletter by email.

The Apple store in Hong Kong, crowded with people.

Customers flood the Apple Store in Hong Kong. Photo by Robert Pastryk via Pixabay, labeled for reuse.

Today Ranking Digital Rights sent a letter to Apple CEO Tim Cook from eight civil society organizations expressing dismay at the company’s decision to delay the implementation of critical privacy protections for iOS 14 until early 2021.

In June, Apple announced plans to roll out a suite of anti-tracking measures for iOS 14, including a requirement that all apps in the App Store ask for users’ permission before tracking them. But soon thereafter, app developers and major companies—Facebook among them—began complaining that the changes would put a dent in their advertising revenues. In September, Apple decided to postpone this privacy protective change until 2021.

Alongside Ranking Digital Rights, signatories to the joint letter include Access Now, Amnesty International, the Electronic Frontier Foundation, Human Rights Watch, the National Hispanic Media Coalition, New America’s Open Technology Institute, and Open MIC (Open Media and Information Companies Initiative).

Collecting people’s data across the internet without their explicit consent violates the human right to privacy and enables discrimination based on user demographics and behavior, including in ways that are illegal. Apps routinely track people’s activities when they use their smartphones, and this often happens without users’ knowledge, much less their consent. To help solve this problem, mobile ecosystem companies—chiefly Apple and Google—should require app developers to be fully transparent about their data collection practices and ensure that users consent to these practices before any of their data is collected.

Apple’s decision to delay these protections validates corporate business models that funnel advertising revenue into companies’ coffers using tracking systems that are on by default, and that users may not be able to opt out of. These data collection practices fuel the surveillance-based influence machine that spreads misleading ads, propaganda, and misinformation across the internet and social media. One month ahead of the U.S. elections and in the midst of an ongoing global pandemic, this will only increase uncertainty for users who are already struggling to find accurate information online.

The delay also runs counter to Apple’s recently announced human rights policy, which pledges an ‘uncompromising commitment to security and user privacy.’ While the delay is a boon for exploitative companies, it is at odds with Apple’s record of pushing the industry to embrace stronger privacy standards, as we reported in the 2019 Ranking Digital Rights Index.

Apple has the opportunity to reinforce its position as an industry leader on protecting the privacy of its users by empowering them to control who can track their online behavior. At the same time, this change can and should enable the company to become more transparent about how it enforces its terms against apps that violate its policies. By delaying the introduction of crucial privacy measures, the company is slowing the momentum it created.

Our letter calls on Apple to make good on the promises embedded in its human rights policy and implement the protections it already announced—not in early 2021, but as soon as possible.

A person's hand holding an iPhone that shows an Apple stock reading.

Image by sergeitokmakov, via Pixabay. Licensed for reuse.

Fasten your seatbelts, investors: Global threats to digital privacy, security, and freedom of expression and information are on the rise. As geopolitical turbulence persists, these digital rights risks will force regulatory action in 2021.

Today we release our Fall 2020 Investor Update. This special report for investors looks at salient geopolitical and regulatory issues for the coming year, highlights how leading companies have responded to recent investor concerns, and suggests key questions to ask as 2021 approaches.

Read RDR’s Fall 2020 Investor Update

A growing number of investors who hold shares in the world’s most powerful tech companies are paying attention to risks related to users’ digital rights. Shareholder advocacy is starting to have an impact. The number of shareholder resolutions addressing issues covered by the RDR Index has risen sharply in the past five years, from just two in 2015 to 12 both this year and last year.

Companies are paying attention to this shift. Apple recently published a new human rights policy after facing a shareholder proposal calling for a public commitment to freedom of expression that was widely supported by major institutional investors.

In this edition of our Investor Update, we analyze the human rights issues raised in the Apple proposal along with three other proposals—two for Alphabet and one for Facebook—each of which cited results from the 2019 RDR Index. We also discuss how RDR’s digital rights indicators, grounded in international human rights standards, can help investors identify which companies are better prepared for the known unknowns of 2021.

See our interactive table of digital rights-related shareholder resolutions filed in 2019 and 2020, cross-referenced to RDR Index indicators.

While 2021 promises to be unpredictable, investors can expect regulation and geopolitics to make digital rights more salient than ever.

  • More regulation is coming: Regardless of the outcome of the general election in the U.S., the case for stronger privacy and antitrust regulation is building in both houses of Congress — and on both sides of the aisle. In Europe, hard questions are being asked in Brussels about whether digital platforms’ targeted advertising business models fundamentally clash with the public interest.
  • Geopolitical competition and conflict are bringing digital rights to the forefront: How companies handle their exposure to China, and how Chinese companies address security concerns outside their home market, will remain materially important in 2021 regardless of 2020 election outcomes. We know companies will continue to face new demands from governments related to user data and online content. Investors should ask whether companies have clear frameworks and processes in place for mitigating threats to users’ rights to privacy and freedom of expression and information in these scenarios.

How companies address their impact on human rights is becoming more relevant to more investors than ever before with the exploding popularity of ESG (environmental, social, and governance) funds that consider companies’ impact on the environment and society, and that have relatively accountable governance structures. In fact, global assets invested in ESG funds hit $1 trillion over the summer. Highly valued tech giants like Facebook, Apple, and Alphabet not only figure prominently in many ESG fund offerings—they have been propping up the equities markets. Yet these tech giants contain serious overlooked digital rights risks, ranging from privacy violations and security breaches to misinformation and censorship. So far, the market has not minded. But as Exxon’s recent removal from the Dow Jones reminds us, nothing lasts forever.

Read RDR’s Fall 2020 Investor Update

For more investor-focused digital rights resources please see our investor page.

Abstract graphic of two heads talking, with speech bubbles containing characters from different languages.

Created by Berkah Icon, from the Noun Project. (CC BY)

In February 2021, we will launch the fifth edition of the RDR Corporate Accountability Index, which will evaluate 26 of the world’s most powerful digital platforms and telecommunications companies on their commitments and policies affecting users’ rights to freedom of expression and privacy.

This may sound like a lot of companies to cover. But when we look around the world, we see just how much more work there is to do.

So Ranking Digital Rights has partnered with Global Voices Translation Services to translate key components of the 2020 RDR Corporate Accountability Index methodology into Arabic, French, and Spanish. With these translations, we hope to support broader adoption of our methodology and to expand the number of companies being held to rigorous human rights standards worldwide.

This year, we revised the methodology that underlies the RDR Index to reflect the widespread use of targeted advertising and algorithmic systems by the digital platforms and telecommunications services that people use every day. Translating these revisions is one way we aim to bolster the capacity of researchers and advocates in the global digital rights ecosystem, support policymakers around the world in protecting users’ rights, and give companies a roadmap for making (or improving) their commitments to respect users’ human rights.

Find translations of our 2020 RDR methodology revisions here:

Explore our other translations here: https://rankingdigitalrights.org/translations/

Get in touch: If you’re a researcher or advocate interested in learning more about our methodology, our research team would love to talk to you! Write to us at info@rankingdigitalrights.org

We thank Global Voices for their work on these translations, as well as our regional partners for their help in reviewing and promoting these materials!