Company scores by indicator

We conduct our research using human rights-based indicators organized under three top-level categories: governance, freedom of expression and information, and privacy.

G: Governance

G1. Policy commitmentG2. Governance and management oversightG3. Internal implementation
G4. Human rights due diligence
G4a. Impact assessment: Governments and regulationsG4b. Impact assessment: Processes for policy enforcementG4c. Impact assessment: Targeted advertisingG4d. Impact assessment: Algorithmic systemsG4e. Impact assessment: Zero-ratingG5. Stakeholder engagement and accountability
G6. Remedy and appeals
G6a. RemedyG6b. Process for content moderation appeals

F: Freedom of expression

F1. Access to policies
F1a. Access to terms of serviceF1b. Access to advertising content policiesF1c. Access to advertising targeting policiesF1d. Access to algorithmic system use policies
F2. Notification of policy changes
F2a. Changes to terms of serviceF2b. Changes to advertising content policiesF2c. Changes to advertising targeting policiesF2d. Changes to algorithmic system use policies
F3. Process for policy enforcement
F3a. Process for terms of service enforcementF3b. Advertising content rules and enforcementF3c. Advertising targeting rules and enforcement
F4. Data about policy enforcement
F4a. Data about content restrictions to enforce terms of serviceF4b. Data about account restrictions to enforce terms of serviceF4c. Data about advertising content and advertising targeting policy enforcement
F5. Process for responding to third-party requests to restrict content or accounts
F5a. Process for responding to government demands to restrict content or accountsF5b. Process for responding to private requests for content or account restrictionF6. Data about government demands to restrict for content and accountsF7. Data about private requests for content or account restrictionF8. User notification about content and account restrictionF9. Network management (telecommunications companies)F10. Network shutdown (telecommunications companies)F11. Identity policyF12. Algorithmic content curation, recommendation, and/or ranking systemsF13. Automated software agents (“bots”)

P: Privacy

P1. Access to policies affecting users’ privacy
P1a. Access to privacy policiesP1b. Access to algorithmic system development policies
P2. Notification of changes
P2a. Changes to privacy policiesP2b. Changes to algorithmic system development policies
P3. User information collection and inference
P3a. Collection of user informationP3b. Inference of user informationP4. Sharing of user informationP5. Purpose for collecting, inferring, and sharing user informationP6. Retention of user informationP7. Users' control over their own user informationP8. Users' access to their own user informationP9. Collection of user information from third parties
P10. Process for responding to demands for user information
P10a. Process for responding to government demands for user informationP10b. Process for responding to private requests for user information
P11. Data about demands for user information
P11a. Data about government demands for user informationP11b. Data about private requests for user informationP12. User notification about third-party requests for user informationP13. Security oversightP14. Addressing security vulnerabilitiesP15. Data breachesP16. Encryption of user communication and private content (digital platforms)P17. Account security (digital platforms)P18. Inform and educate users about potential risks