We are thrilled to announce Ranking Digital Rights’ participation in a new collaborative partnership with Consumer Reports and several other leading privacy, security, and human rights organizations to develop a digital standard to measure the privacy and security of products, apps, and services.

The goal is to help companies prioritize consumers’ data security and privacy needs, and to help consumers make informed choices. The first version of the standard was unveiled today at https://thedigitalstandard.org.

The digital standard draws from the Ranking Digital Rights research methodology along with other technical testing and research methodologies developed by Disconnect and the Cyber Independent Testing Lab with assistance from our friends at Aspiration.

As a part of today’s launch, the coalition behind the new digital standard is inviting broader input and collaboration from a range of stakeholders to help develop and improve the new protocol. Click here to review the proposed criteria for evaluating software, services, and devices and to find out how to contribute to the standard via GitHub.

We will be talking about the standard and how it was developed at South by Southwest (SXSW) in Austin, TX on March 13th at 9:30am and look forward to many more discussions over the coming months.

We are excited to announce that on March 23rd at 9:30am ET (13:30 GMT/UTC) Ranking Digital Rights will launch the 2017 Corporate Accountability Index: a ranking of 22 of the world’s most powerful telecommunications, internet, and mobile companies on their commitments and disclosed policies affecting users’ freedom of expression and privacy.

The 2017 Index follows the inaugural 2015 Ranking Digital Rights Corporate Accountability Index which found widespread failure by companies to disclose key information about their policies and practices affecting freedom of expression and privacy. Users were left largely in the dark about how and why their information is collected, used, and shared, as well as many of the circumstances under which content is blocked or removed.

Click here to join us on launch day to find out what has changed since 2015, what companies can do to improve, and why it matters. Presentation of the Index results will be followed by a discussion about how consumers, activists, investors, and companies themselves can use that data to ensure that, as businesses power and shape our internet, they also do a better job of respecting our rights.

The launch will be webcast globally; visit this page on the day of the event to access the video. Join the conversation online by using #rankingrights and by following @rankingrights.

Ranking Digital Rights is an official host organization for the Open Technology Fund’s 2017 Information Controls Fellowship, which considers applicants from a broad range of specializations and approaches to propose projects that would help “increase understanding of tactics used by repressive governments to censor and surveil the internet and mechanisms to overcome them.”

As a fellowship host, RDR welcomes applications from graduate students and seasoned researchers with backgrounds in computer science, engineering, internet and telecommunications law, or communications studies with a strong technical background. Projects should be directly related to RDR’s core mission, which is to evaluate and benchmark ICT sector companies on their respect for freedom of expression and privacy. At the same time, fellows should help to address new research questions, methodological problems, or advocacy opportunities not presently covered by the work of RDR’s core full-time staff. For example:

  • Carry out a research project designed to help us to identify, develop, and test out changes to the Index research methodology to accommodate new types of companies or technologies;
  • Carry out a research project to determine how the Index research methodology should be adapted to companies operating in a single country or region;
  • Support a regional research partner in developing and piloting a national or regional version of the Index;
  • Develop a research or technical testing project, using the Index data and findings as a starting point, to examine the impact of certain company policies among certain user communities, or to verify whether companies’ actual practices are consistent with their disclosed policies. Ideally the project could serve as a proof of concept for other researchers to emulate or expand upon;
  • Work with NGO partners in a particular country or region to develop advocacy strategies using Index data;
  • Develop new ways of sharing and using the Index data for advocacy through visualizations and other online tools.

Prior academic research experience or professional work related to freedom of expression, censorship, privacy, and surveillance in the ICT sector is important. Prior experience working collaboratively with teams and meeting deadlines is also important. International experience and ability to read at least one language other than English is a major plus.

The successful applicant will demonstrate a thorough understanding of the Ranking Digital Rights Corporate Accountability Index: its purpose, research methodology, advocacy goals, etc., and will clearly articulate how his or her skills and interests can concretely build upon the project’s methodology, research community, and outputs. We are a global project and proposals to work remotely for all or part of the fellowship are welcome when accompanied by evidence that the applicant has prior experience working remotely with people in other countries. When submitting a CV it will be useful if the applicant can include a list of appropriate references who can attest to their experience and track record.

Click here to learn more about the fellowship (including start times, fellowship length, different fellowship types, stipend, etc) and to apply through the OTF website.

As governments around the world adopt internet regulations that clash with international human rights norms, new and more innovative mechanisms are needed to hold tech companies accountable to these standards, according to a new paper by Ranking Digital Rights (RDR) team members published by the Centre for International Governance Innovation (CIGI).

In the paper, “Corporate Accountability for a Free and Open Internet,” authors Rebecca MacKinnon, Nathalie Marechal, and Priya Kumar make the case for how global human rights benchmarking and evaluation projects like RDR’s Corporate Accountability Index help fill “governance gaps” caused by the failure of traditional governance institutions to hold governments and companies accountable for protecting and respecting the rights of internet users around the world.     

“Private Internet intermediaries increasingly find themselves at odds with governments, with serious implications for human rights,” according to the authors. “Even where law does not compel companies to violate users’ rights, companies generally lack sufficient market and regulatory incentives to protect the human rights of all of their users.”

The authors therefore call for new cross-border accountability initiatives outside existing governance institutions that will strengthen and enforce corporate accountability in upholding international freedom of expression and privacy standards: “If international legal and treaty frameworks cannot adequately protect human rights, then other types of governance and accountability mechanisms are urgently needed to provide incentives to owners and operators of Internet platforms and services to respect human rights,” according to the authors.  

Ranking Digital Rights is one of several efforts that might serve as building blocks for such mechanisms and institutions, according to the authors. The inaugural Index, published in November 2015, ranked Internet and telecommunications companies on 31 indicators evaluating disclosed commitments, policies and practices affecting Internet users’ freedom of expression and right to privacy. These types of rankings, when combined with transparency and disclosure frameworks, can help foster greater accountability as well as respect for international human rights standards.

Why are privacy policies so difficult to understand? Because they are vague and unclear–which prevents users from understanding what companies do with their information, according to new research by former Ranking Digital Rights (RDR) research analyst Priya Kumar.

In November 2016, Kumar presented a paper using data from RDR’s 2015 Corporate Accountability Index, in which she analyzed the privacy policies of 16 of the world’s largest tech companies evaluated in that year’s Index. Her research shows that these companies typically fail to convey to users what happens to their information–from the point it is collected to when it is (possibly) deleted. Kumar finds that along with vague or unclear language, the lack of uniform definitions for what companies consider “personal information” make it difficult for users to get a complete and accurate picture of how companies handle their information.

The analysis also shows that companies are more transparent about the information they collect compared to what information they share, and that companies are least transparent about what user information they retain–even after a user deletes their account or service. “People would expect a company to keep information they actively submit to the service (e.g., posts, messages, photos, videos, etc.), until they delete it themselves,” according to Kumar. “But companies collect several other types of user information, and they typically fail to disclose how long they retain those types of information.”

The paper was presented as part of the Privacy and Language Technologies track of the Association for the Advancement of Artificial Intelligence’s (AAAI) Fall Symposium Series held in Virginia. Click the link for a PDF of the paper: Privacy Policies and Their Lack of Clear Disclosure Regarding the Life Cycle of User Information