7. Appendix

7.1 RDR Index methodology development

The Ranking Digital Rights Corporate Accountability Index was developed over three years of research, testing, consultation, and revision. Since its inception, the project has engaged closely with researchers around the globe. For methodology development, pilot study, and the inaugural RDR Index we also partnered with Sustainalytics, a leading provider of ESG (environmental, social, and governance) research to investors.

For more information about the RDR Index methodology development, see: rankingdigitalrights.org/methodology-development

To view or download the full 2019 RDR Index methodology, visit: rankingdigitalrights.org/2019-indicators

Looking ahead: Following the launch of the 2019 RDR Index, we plan to expand our methodology to address human rights harms associated with targeted advertising, algorithms, and machine learning. We will also adapt the methodology to include more company types, like powerful global platforms with core e-commerce businesses such as Amazon and Alibaba. The fifth RDR Index, with the expanded methodology and scope, will be published in 2021.

To learn more about the 2021 RDR Index methodology development process, see: rankingdigitalrights.org/methodology-development/2021-revisions

7.2 Company selection

The 2019 RDR Index evaluates 12 telecommunications companies and 12 internet and mobile ecosystem companies. All companies evaluated are multinational corporations listed on a major stock exchange. The following factors influenced company selection:

  • User base: The companies in the RDR Index have a significant footprint in the areas where they operate. The telecommunications companies have a substantial user base in their home markets, and the internet and mobile ecosystem companies have a large number of global users as identified by established global traffic rankings such as Alexa. The policies and practices of the selected companies, and their potential to improve, thus affect a large percentage of the world’s 4.3 billion internet users.115
  • Geographic reach and distribution: The RDR Index includes companies that are headquartered in North America, Europe, Africa, Asia, and the Middle East.
  • Relevance to users’ freedom of expression and privacy rights: Most of the companies in the RDR Index operate in or have a significant user base in countries where human rights are not universally respected. This is based on relevant research from such organizations as Freedom House, the Web Foundation, and Reporters Without Borders as well as stakeholder feedback.

7.3 Selection of services

The following factors guided the selection of services:

Telecommunications services: These operators provide a breadth of services. To keep the scope manageable while still evaluating services that directly affect freedom of expression and privacy, the RDR Index focused on: 1) postpaid and prepaid mobile services, including voice, text, and data services; and, 2) fixed-line broadband, in cases where it was available in the company’s home operating market. Only consumer services were included.

Internet services: Two or three discrete services were selected based on their comparability across companies, the size of their user base, and their ability to paint a fuller picture of the overall company approach to freedom of expression and privacy. This enabled researchers to discern whether company commitments, policies, and practices applied to the entire corporate entity or only to specific services.

Mobile ecosystems: Most of the world’s mobile devices are running either on Apple’s iOS operating system, or some version of Google’s Android mobile operating system. Thus we evaluate Apple’s iOS ecosystem plus two different variants of the Android ecosystem: Android on devices controlled directly by Google (the Nexus smartphone and Pixel tablet product lines), and Android on devices controlled by Samsung.

7.4 Levels of disclosure

The RDR Index considered company disclosure on several levels—at the parent company level, the operating company level (for telecommunications companies), and the service level. This enabled the research team to develop as complete an understanding as possible about the level at which companies disclose or apply their policies.

For internet and mobile ecosystem companies, the parent company typically delivered the services. In some cases the service was also a subsidiary. However, the structure of these companies was generally such that the subsidiary only delivered one service, which made it straightforward to understand the scope of policy disclosure.

For telecommunications companies, with the exception of AT&T, the parent company did not directly provide consumer services, so researchers also examined a subsidiary or operating company based in the home market to ensure the RDR Index captured operational policies alongside corporate commitments. Given AT&T’s external presentation of its group-level and U.S. operating company as an integrated unit, we evaluated the group-level policies for AT&T.

7.5 Research process and steps

RDR works with a network of international researchers to collect data on each company, and to evaluate company policies in the language of the company’s operating market. RDR’s external research team for the 2019 RDR Index consisted of 32 researchers from 17 countries. A list of our partners and contributors can be found at: rankingdigitalrights.org/who/affiliates

The research process for the 2019 RDR Index consisted of several steps involving rigorous cross-checking and internal and external review, as follows:

  • Step 1: Data collection. A primary research team collected data for each company and provided a preliminary assessment of company performance across all indicators.
  • Step 2: Secondary review. A second team of researchers conducted a fact-check of the assessment provided by primary researchers in Step 1.
  • Step 3: Review and reconciliation. RDR research staff examined the results from Steps 1 and 2 and resolved any differences that arose.
  • Step 4: First horizontal review. Research staff cross-checked the indicators to ensure they had been evaluated consistently for each company.
  • Step 5: Company feedback. Initial results were sent to companies for comment and feedback. All feedback received from companies by the agreed upon deadline was reviewed by RDR staff who made decisions about score changes or adjustments.
  • Step 6: Second horizontal review. Research staff conducted a second horizontal review, cross-checking the indicators for consistency and quality control.
  • Step 7: Final scoring. The RDR team calculated final scores.

7.6 Company engagement

Proactive and open stakeholder engagement has been a critical component of RDR’s work and of the RDR Index methodology. As such, we communicated with companies throughout the research process.

Open dialogue and communication. Before the research began, we contacted all 24 companies and informed them that they were included in this year’s RDR Index, describing our research process and timeline. Following several stages of research and review, we shared each company’s initial results with them. We invited companies to provide written feedback as well as additional source documents. In many cases, the research team conducted conference calls or meetings with companies that requested them to discuss the initial findings as well as broader questions about the RDR Index and its methodology.

Incorporating company feedback into the RDR Index. While engagement with the companies was critical to understand company positions and ensure the research reviewed relevant disclosures, the RDR Index evaluates information that companies disclose publicly. Therefore, we did not consider a score change unless companies identified publicly available documentation that supported a change. Absent that, the research team reviewed company feedback and considered it as context for potential inclusion in the narrative report, but did not use it for scoring purposes.

7.7 Scoring

The RDR Index evaluates company disclosure of the overarching “parent” or “group” level as well as those of selected services and or local operating companies (depending on company structure). Each indicator has a list of elements, and companies receive credit (full, partial, or no credit) for each element they fulfill. The evaluation includes an assessment of disclosure for every element of each indicator, based on one of the following possible answers:

  • “Yes”/ full disclosure: Company disclosure meets the element requirement.
  • “Partial”: Company disclosure has met some but not all aspects of the element, or the disclosure is not comprehensive enough to satisfy the full scope of what the element is asking for.
  • “No disclosure found”: Researchers were unable to find information provided by the company on their website that answers the element question.
  • “No”: Company disclosure exists, but it specifically does not disclose to users what the element is asking. This is distinct from the option of “no disclosure found,” although both result in no credit.
  • “N/A”: Not applicable. This element does not apply to the company or service. Elements marked as N/A will not be counted for or against a company’s score.

Points

  • Yes/full disclosure = 100
  • Partial = 50
  • No = 0
  • No disclosure found = 0
  • N/A = excluded from the score and averages

Companies receive a cumulative score of their performance across all Index categories, and results show how companies performed by each category and indicator. Scores for the Freedom of Expression and Privacy categories are calculated by averaging scores for each individual service. Scores for the Governance category indicators include group-, operating-, and service(s)-level performance (depending on indicator and company type, see below).

Governance category scoring

  • G1, G5:
  • Internet and mobile ecosystem companies’ scores were based on the group-level scores.
  • Telecommunications companies’ scores were based on average group-level and operating company scores.
  • G2, G3, G4:
  • Internet and mobile ecosystem companies’ scores were based on average of group-level and services scores.
  • Telecommunications companies’ scores were based on average of group-level, operating, and services scores.
  • G6:
  • Internet and mobile ecosystem companies’s scores were based on average of service-level scores.
  • Telecommunications companies’s scores were based on average of service-level scores.

Indicator and element scoring

Telecommunications companies were evaluated on 32 of the 35 indicators; internet and mobile ecosystem companies were evaluated on 33 of the 35 indicators. Some elements within indicators were not applicable to certain services.

The following list identifies which indicators or elements were N/A for certain companies or services: F3, Element 2: N/A for search engines

  • F3, Elements 4-5: N/A for prepaid and postpaid mobile services, cloud service, email services, and messaging services
  • F5-F7: N/A for email services
  • F6, Element 2: N/A for search engines
  • F7, Element 2:N/A for search engines
  • F6, Element 3: N/A for messaging services
  • F7, Element 3: N/A for messaging services
  • F8, Element 1: N/A for telecommunications companies
  • F8, Elements 1 & 4: N/A for search engines
  • F8, Elements 1-3: N/A for email services
  • F9: N/A for internet and mobile ecosystem companies
  • F10: N/A for internet and mobile ecosystem companies
  • F11: N/A for postpaid mobile and fixed-line internet services and search engines
  • P9: N/A for telecommunications companies
  • P14, Elements 5, 6, 9: N/A for internet companies and Google and Apple mobile ecosystems, and fixed-line broadband services
  • P14, Elements 4, 7, 8: N/A for internet companies and telecommunications companies
  • P16: N/A for telecommunications companies
  • P16, Elements 3-4: N/A for internet services without private messaging functions
  • P17: N/A for telecommunications companies and search engines

The following elements apply only to mobile ecosystems:

  • P1, Element 4
  • P2, Element 5
  • P3, Elements 4-5
  • P4, Elements 5-6
  • P6, Elements 6-7
  • P7, Element 5
  • P8, Element 5
  • P14, Elements 4, 7-8

7.8 For further information

The 2015 RDR Index can be viewed here: rankingdigitalrights.org/index2015

The 2017 RDR Index can be viewed here: rankingdigitalrights.org/index2017

The 2018 RDR Index can be viewed here: rankingdigitalrights.org/index2018

Footnotes

[115] Figures as of March 25, 2019. “World Internet Users and 2019 Population Stats,” Internet World Stats, accessed April 22, 2019, www.internetworldstats.com/stats.htm