Corporate transparency is essential to building public trust, according to Annette Fergusson, head of Vodafone Group’s Sustainable Business unit, who spoke on a panel for the European launch of the Ranking Digital Rights 2017 Corporate Accountability Index at RightsCon in Brussels on March 29.

The event featured Ranking Digital Rights (RDR) project director Rebecca MacKinnon, who was joined by a group of panelists to discuss results of the 2017 Index, which ranked 22 of the world’s largest internet, mobile, and telecommunications companies on their disclosed commitments to users’ freedom of expression and privacy. Along with Vodafone’s Fergusson, panelists included Silvia Grundmann, head of the Media and Internet division at the Council of Europe, Adam Kanzer, managing director of Domini Impact Investments, a socially responsible mutual fund, and Afef Abrougui, a researcher with Beirut-based Social Media Exchange Network (SMEX) and an RDR research affiliate. The session was moderated by Malavika Jayaram, executive director of the Digital Asia Hub, an internet research center based in Hong Kong.

Panelists discussed why companies should be transparent about policies affecting users’ freedom of expression and privacy. According to Fergusson, companies need to be transparent in order to gain users’ trust: “Without trust, we don’t have a social license to operate,” she said. Vodafone tied with AT&T for the top spot among the ten telecommunications companies ranked in the 2017 Index. Vodafone earned the highest score among telecommunications companies on the Index’s governance indicators, which measure a company’s institutionalized commitments to human rights, including to freedom of expression and privacy.

While transparency is essential, companies should also work to ensure that human rights commitments made at the parent level are followed through at all levels of the company, according to Abrougui. Telecommunications companies, for instance, can have different policies, and varying levels of policy disclosure, in the different markets in which they operate, she said.  

Kanzer noted that while there is a difference between measuring company disclosure of their policies and measuring their actual practices, policy transparency is an important first step.

Talking so companies will listen, listening so companies will talk

Also at RightsCon, RDR senior research fellow Nathalie Maréchal led a roundtable discussion called “How to Talk So Companies Will Listen, and Listen So Companies Will Talk: Doing Company Advocacy and Research.” The session brought together researchers, advocates, and industry representatives to share best practices for communicating their research or advocacy initiatives to companies.

Participants shared their experiences and strategies for engaging with companies through their work on a variety of projects, including the Fundación Karisma’s and Digital Rights Foundation’s research evaluating the privacy policies of telecommunications companies in Pakistan, and OpenNet Korea’s work with Citizen Lab researching the Korean app “Smart Sheriff.” UCLA professor Sarah Roberts also offered insights into her experiences engaging with companies as part of her research on commercial content moderation. Strategies for company engagement depend on the company and political contexts, and can include building long-term relationships with human rights allies within companies, according to participants.

Michael Samway, former Vice President and Deputy General Counsel at Yahoo! Inc. who founded the company’s Business and Human Rights Program, noted that trust between advocates and companies is only formed through years of engagementand that for advocates, it is crucial to have practical solutions in mind before approaching a company.  

Samway, who serves as an RDR advisory board member, was also interviewed at RightsCon for a podcast discussion about evolution of the  broader business and human rights movement, and how advocates and other stakeholders can achieve meaningful engagement with companies.

This year’s RightsCon event in Brussels brought together 1,500 participants from 100 countries, according to event organizer Access Now. We look forward to seeing everyone next year at the seventh annual RightsCon conference in Toronto!

Since its release on March 23, the 2017 Ranking Digital Rights Corporate Accountability Index has received attention from NGOs and media outlets around the world.

According to Cynthia Wong of Human Rights Watch, the Index “provides users with a crucial assessment about company policies, and a roadmap for the basic standards firms must meet if they hope to earn our trust by respecting our privacy and freedom of expression.”

Ranking Digital Rights (RDR) partner Access Now highlighted the Index’s findings showing that telecommunications companies lack transparency about their processes for responding to network shutdown requests from governments. “Telcos can often be required to shut down the internet at risk of losing their licenses to operate, but still have options to push back against governments,” according to the organization. “Ranking Digital Rights illuminates many ways for telcos to increase transparency on their shutdown policies and practices.”

R3D, a digital rights organization based in Mexico, also published a piece spotlighting the performance of Mexican telecommunications company América Móvil, which ranked fifth out the 10 telecommunications companies evaluated in the 2017 Index.

The Global Network Initiative (GNI) issued a statement highlighting a key Index finding that GNI and Telecommunications Industry Dialogue (TID) members were among the top performers in the Index.

Index findings were also reported in Yahoo Finance, Observer, Media Power Monitor, Vocativ, Global Voices Advox, Entrepreneur, and CSO Australia. The China Digital Times and Hong Kong Free Press reviewed the differences between the two Chinese companies evaluated, Baidu and Tencent.

In addition, RDR team members were interviewed and invited to write pieces about the 2017 Index research. On NPR’s Weekend Edition, RDR project director Rebecca MacKinnon discussed key findings of the Index and what these findings mean for users’ freedom of expression and privacy. “What’s really important is that companies be transparent, so people know who to hold accountable,” she said. “If your content is being removed or you’re being prevented from accessing certain information, you need to know who is responsible for that decision.”

In the Consumerist, senior research fellow Nathalie Maréchal discussed the Index findings related to mobile ecosystems. Our research showed that all three mobile ecosystems evaluatedApple iOS, Google Android, and Samsung’s implementation of Androidfailed to sufficiently disclose policies affecting users’ freedom of expression and privacy. In a piece for Global Voices Advocacy, Maréchal also discussed how cheaper smartphones can leave users more vulnerable to online threats and hacking, highlighting the importance of company disclosure of how they address security vulnerabilities.

In Slate, policy and communications analyst Ilana Ullman discussed the issue of Facebook and Twitter providing access to Geofeedia, a third-party developer that marketed its social media-monitoring product as a surveillance tool to U.S. law enforcement. The issue highlights why social networks need more clear terms of service, according to Ullman. “Social media companies must be more transparent with their users about the steps they are taking to crack down on surveillance tool developers like Geofeedia, and provide evidence that these commitments are being implemented,” she wrote.

In the New America Weekly, senior research analyst Laura Reed discussed how the recent roll back of the FCC’s broadband privacy guidelines will negatively impact transparency and public accountability around how companies handle users’ information. “All companies should, at the very least, tell users what they are doing with their personal information,” according to Reed.

Read more about the 2017 Index, key findings, and recommendations. The full report and raw data can be downloaded here.

Please help us make the 2017 Corporate Accountability Index and its findings more accessible to people all over the world.

RDR evaluates companies that are headquartered around the world, and whose products and services are used by people across the globe. Due to limited resources, however, the 2017 Index report and website are currently available only in English. Please help us change that!

We have partnered with Global Voices Translation Services to translate key components of the 2017 report and methodology into major languages—or possibly the whole thing—as funds permit.

We will start with Spanish, French, Arabic, Chinese, and Russian—in that order, as funds permit.

Key findings and recommendations, methodology and indicators, and selected company report cards with greatest relevance to specific language communities will be the priority.

Click here to support translation by Global Voices of the RDR 2017 Index and methodology.

If you have further questions or would like to fund the translation of specific components of the report into specific languages, please contact us at info AT rankingdigitalrights.org.

This week, the Ranking Digital Rights team is in Brussels for RightsCon, an annual conference on digital rights organized by Access Now. We are organizing and participating in several sessions and look forward to discussions with human rights and technology experts and advocates from all over the world.

On Wednesday March 29 at 2:30pm, we will host the European launch of the newly-released 2017 Ranking Digital Rights Corporate Accountability Index, which found that 22 of the world’s leading internet, mobile, and telecommunications companies are leaving users in the dark on their policies affecting free expression and privacy rights. Project director Rebecca MacKinnon will give a brief presentation highlighting the report’s key findings and recommendations, followed by a discussion with panelists and audience members. We hope the session will provide a jumping off point for further conversation throughout RightsCon with people interested in collaborating on research and advocacy. The launch event will be held in “Creativity & Exploration, 1st Floor.”

On Friday March 31 at 12pm, join us for “How to Talk So Companies Will Listen, and Listen So Companies Will Talk: Doing company advocacy and research.” In this roundtable discussion, seasoned researchers and advocates will share how they work to understand company policies and practices, and share insights on the most effective ways to engage with companies for change. Participants will discuss challenges they’ve encountered in their research and advocacy efforts as well as tips and best practices for overcoming them. This session will be held in “Evasion, 1st Floor.”

Rebecca MacKinnon is also speaking in the session, “Everything We Know About Internet Shutdowns,” on Wednesday March 29 at 12pm, in “Palace Ballroom I, Ground Floor.”

The full conference program is available here. Our team will be at RightsCon for the entire conference, so feel free to get in touch if you’d like to connect: info@rankingdigitalrights.org.

People around the world increasingly rely on the internet and digitally networked devices in all aspects of their lives. But do we have a global information ecosystem in which future generations’ rights can be respected?

Unfortunately, the answer is “no,” according to our research. Ranking Digital Rights (RDR) on March 23 launched its 2017 Corporate Accountability Index which ranks 22 of the world’s most powerful telecommunications, internet and mobile companies disclosed commitments and policies affecting user’s freedom of expression and privacy. Findings showed that companies did not disclose enough information about policies affecting users’ rightsand as a result most of the world’s internet users lack the information they need to make informed choices.  

Click image to watch video of the full event. (Photo by Niels ten Oever)

“There is tremendous room for improvement by all companies,” said project director Rebecca MacKinnon, despite positive steps by some companies since organization released its inaugural Index in 2015. Only two companiesGoogle and Microsoftscored more than 60 percent on this year’s Index, with the remaining 20 companies evaluated receiving failing grades.

This year’s Index included an evaluation of the “mobile ecosystems” controlled by Apple, Google and Samsung. Findings showed that Apple’s iOS, Google’s Android, and Samsung’s implementation of Android all offered poor disclosure of policies affecting users’ freedom of expression and privacy. This is a particular concern given that most of the world’s new internet users are coming online with smartphones.  

MacKinnon also highlighted that companies overall struggled to disclose policies affecting users’ freedom of expression. For example, all telecommunications companies evaluated had insufficient disclosure on their policies for responding to requests for network shutdowns. Telefónica and Vodafone tied for the highest score on this indicator, but these companies still fell short. None of the telecommunications companies evaluated provided any information on the number of network shutdown requests with which they complied.

Companies that disclosed data breach-related policies.

While companies tend to focus more on privacy and security than freedom of expression, there are nonetheless serious gaps. On the indicator measuring company disclosure of their policies for responding to data breaches, only three out of all 22 companies evaluated, disclosed any information. This is troubling given recent news of various high-profile data breaches, and this issue is of particular concern for users and investors alike.

MacKinnon was joined for a panel discussion by Melissa Brown, Partner at Daobridge Capital and Arvind Ganesan, Director of Business and Human Rights at Human Rights Watch. Moderating the discussion was Niels ten Oever, Head of Digital at Article 19, and Open Technology Institute Director Kevin Bankston.

Panelists discussed whether rankings like the Index can motivate companies to change their policies make policy change. Does highlighting differences in company performance promote competition and a “race to the top”? Do companies that perform better do so because of their business models, because they have been exposed to public scrutiny for longer, or because of other factors?

As speakers noted, there have already been some improvements since the first Index in 2015. Bankston pointed out that in the 2015 report, not a single company received any credit for disclosure of data about content takedowns due to the company’s terms of service enforcement. In the 2017 Index, three companies received some credit on this indicator, and just this week Twitter released its latest transparency report, for the first time including some data on terms of service takedowns.

“With that domino falling, if the trend goes the way it usually does, this is going to become a common practice in the next five or ten years, and that will be due in no small part to the work of Ranking Digital Rights,” said Bankston.

Many people in the audience were concerned about poor company disclosure of the user information they collect, share, and retain. “If someone built a profile on me based on my use of Google, Facebook, AT&T, and my iPhone ecosystem, what kind of profile could be built about me? I need to have enough information that I have some sense of that so that I can then make informed choices. And right now, people are much too far in the dark on that.” One person asked whether it is harder to get companies to change when opacity about the handling of user information is connected to companies’ business model. Another audience member who works for  a company not covered by the Index responded: “If you don’t have people trusting you, you don’t have a business.”

The impetus for change can come not only from civil society activists and policymakers but also from investors. As Daobridge’s Capital’s Melissa Brown pointed out, investors are not monolithic:  some focus on human rights issues in general but few truly understand digital rights issues. However, Brown believes that the Index shows the extent to which “companies are outsourcing privacy and security risks to users,” without giving users enough information to understand or protect themselves against the risks. Over the long run, privacy and security will become “increasingly material” to investors, Brown said.

Fortunately, the Index provides a roadmap for companies to improve. Of course, the 2017 Index is just the beginning of the conversation. We look forward to continuing this dialogue, starting with RightsCon in Brussels next week!

A webcast of the event is available here.