Red Flag 16. Using data such that privacy and other rights are undermined

RED FLAG # 16

Collecting, holding or monetizing data about customers or users in ways that lead to adverse impacts on privacy, and other human rights.

For Example
  • A social media or search company gathering, or sharing, user data without the consent of those users
  • Email or messaging service providers sharing information about political activists or members of persecuted communities with governments that then use that information to violate those people’s rights
  • Retailers, banks, airlines, hotels not adequately protecting the data they collect about customers such that those dataare accessible to hackers and in some way become public
  • Data brokers selling comprehensive consumer profiles as a raw product without the knowledge of those individuals
Higher-Risk Sectors
  • Multiple Segments of the Technology Industry:
    • Telecommunications, Internet Service Providers, and Web Hosting companies
    • Data Center or Cloud Service providers
    • Social Media platforms, and email and messaging service providers
    • Providers of web or mobile phone Apps
    • Supporting online communities and gaming
    • Consumer tech devices and service providers
    • IT firms providing digital services to government agencies
  • Non-technology companies that collect and hold personal data e.g. health care, retail and financial services companies and then “non-technology” companies that use data on customer usage, habits or movements, such as household appliance manufacturers and automotive companies.
  • Data brokers that collect data (e.g. from the internet, government sources etc.) and buy it from other companies (e.g. credit card companies) to either sell comprehensive consumer profiles as a raw product or sell big data analytics as a service (e.g. for risk evaluations, price optimization, targeted advertising).
Questions for Leaders
  • Have we established that the business benefit of collecting customer or user data actually outweighs the costs of protecting those data, and the risks of data breaches? Have we analyzed the relative merits of not collecting or holding this type of data?
  • Do the incentives that drive our data collection undermine the ability of people to give their consent to us collecting and using it?
  • How confident are we that the entities we are selling to, or sharing data with will not expose, misuse or abuse that data?
  • How adequate are our scenario planning, training and action plans for potential breaches of data security?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People

There are a range of reasons why companies in diverse sectors are collecting and holding data. For example, private hospitals and pharmaceutical companies may do so to improve diagnoses, improve treatment plans and develop medicines; banks may use personal and transaction data to identify fraud; and autonomous vehicle companies may seek to monetize data about customer driving habits to enable individuals to improve insurance premiums. Even so, in order to fully realize these benefits for businesses and people, the following risks must be managed.

  • Right to Privacy: Where a company collects, holds or provides third parties with access to data about customers or users, there are inherent and widespread privacy risks. Examples include:
    • Where information about an individual is collected, sold or shared without their consent. This includes when data are used for purposes beyond those originally consented to by a “data subject.”
    • Where data breaches result in individuals’ personal financial or health data being publicly accessible.
    • Breaches of sensitive personal information, such as racial or ethnic origin, political opinions, religious or other beliefs, trade union membership, sex, gender identity or sexual orientation, genetic data, biometric data, or data concerning health.
  • Freedom from Arbitrary Attacks on Reputation and Right to an Adequate Standard of Living: Where the personal data becomes accessible to the public, this data can be used to threaten individuals or tarnish their reputations, which can in turn impact victims’ mental health, job prospects and livelihoods.
  • Government Requests Leading to Abuses of Freedom of Expression and other Human Rights: For example, where governments demand the company hands over:
    • The communications history of political activists or human rights defenders and use it to identify, intimidate, threaten, detain and even torture them.
    • Data about social media and other online activities of LGBTQI people that is used to violate their right to non-discrimination and rights to liberty and security.
  • Risks to the Right to Non-Discrimination: Where data are used, shared or sold to third parties who use them in algorithmic decision-making that impacts their access to credit, welfare services, insurance or other services. (See Red Flag 5).
Risks to the business
  • Operational Costs Following Breaches: Companies that experience a data breach faced immediate financial costs. The Home Depot breach of 56 million customer credit cards was estimated to cost $62 million to enable, among other steps: the post-breach investigation, call center staffing and monitoring of breached accounts for unusual activity. According to IBM’s 2020 Cost of Data Breach report, the global average total cost of a data breach is $3.86 million.
  • Reputational Risk. Loss of Trust: A 2017 Forbes article notes that according to a PwC survey, “only 25% of consumers believe companies handle their personal information responsibly and 87% will take their business to a competitor if they don’t trust a company to handle their data responsibly.” An International Data Corporation study found that “80% of consumers in developed nations will defect from a business because their personally identifiable information is impacted in a security breach.”
  • Stock Price Risk: There have been a number of reports about the impact of high-profile data breaches on company stock prices. The Facebook and Cambridge Analytica scandal of 2018 reportedly led to a $119 billion dollar loss in market value. A UK study notes that, “Companies that self reported their security posture as superior and quickly responded to the breach event recovered their stock value after an average of 7 days. In contrast, companies that had a poor security posture at the time of the data breach and did not respond quickly to the incident experienced a stock price decline that on average lasted more than 90 days.”
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

  • A company can cause an adverse impact on the right to privacy of any stakeholder group that it collects data on, and at any stage of the data lifecycle.
    • When Collecting Data: Although there are arguments that businesses obtain a “conscious compromise” from users about the exchange of information for goods and services, they may cause an impact on the right to privacy if the customer is not “truly aware of what data they are sharing, how and with whom, and to what use they will be put.” (The Right to Privacy in the Digital Age. OHCHR, A/ HRC/27/37).
    • When Holding Data: A company may not have in place adequate security protections such that a human or system error results in personal data being accessible by third parties.
  • A company’s use or mismanagement of data may contribute to a range of human rights harms depending on the context.
    • Where a company suffers a data breach and personal data is accessed by a third party who then uses it to threaten the individuals whose data was leaked.
    • Where a company makes a decision – even if consistent with local law – to provide personal data to a third party where it should have known that the data were likely to be used to abuse the rights of the data subjects concerned.
    • Where companies (for example, banks and IT services firms, or automotive and insurance companies) work together to collect, analyze and interpret data in ways that lead to discriminatory pricing.
    • Where a company sells or in some way shares personal data with business customers who in turn use those data in harmful ways.
  • A company can be linked to a human rights harm where it has sold or provided data to a business entity or government, and that entity uses those data in ways that are unforeseeable but nevertheless lead to adverse impacts on people.

Possible Contributions to the SDGs

Data about individuals can be used to advance a number of SDGs such as those listed below. Addressing impacts to people associated with this red flag can contribute to ensuring that this is done in ways that do not simultaneously increase discrimination, or erode the privacy, reputation and well-being of vulnerable communities.

SDG 10: Reduce Inequality within and Among Countries.

SDG 3: Healthy Lives and Well-Being for all. Including by tackling disruptions to progress such as from the COVID-19 global pandemic.

SDG 5: Achieve gender equality and empower all women and girls, in particular: Target 5.b Enhance the use of enabling technology, in particular information and communications technology, to promote the empowerment of women.

SDG 9: Industries, Innovation and Infrastructure, in particular: Target 9.5 Upgrading industrial sectors; Target 9.b Domestic technological development; and Target 9.c: Access to technology and the internet.

SDG 17: Strengthen the means of implementation and revitalize the global partnership for sustainable development, in particular: Target 17.18 Increasing the availability of high-quality, timely and reliable data disaggregated to achieve development goals.

The UN Secretary-General’s Roadmap for Digital Cooperation is an important resource to guide “all stakeholders to play a role in advancing a safer, more equitable digital world” even as technological solutions are used to achieve the SDGs.

Taking Action

Due Diligence lines of Inquiry
  • Do we have policies, processes and practices that follow the principle of data minimization such that we only collect or purchase data to the degree that is absolutely necessary to accomplish specific tasks we have in mind?
  • Have we conducted an assessment, and where necessary put in place mitigation plans, for privacy and other risks to people that may arise across the data life cycle including generation, collection, processing, storage, management, analysis and interpretation?
    • Have we done this for all stakeholder groups that may be at risk including employees, contract workers, prospective employees, customers and users?
    • Are we engaging expert groups and potentially affected groups to ensure we understand the risks they perceive or experience?
    • Do we assess whether and how our terms of service or policies for gathering and sharing customer data might increase human rights risks?
  • Do we ensure that customers or users consent to how we gather and use their data, and that their consent is free and informed, including that they:
    • Know that we gather and are in control of data about them.
    • Are informed about how the data will be obtained and held, and for how long.
    • Understand the operations that will be carried out on their data.
  • Know how they can withdraw their consent for the use of their data.
  • Where we buy data from another company, are we confident that it was legally acquired? Do we have ways to verify its accuracy?
  • Where we sell or share data with third parties:
    • Do we assess if they have the appropriate security and safeguards?
    • Do we have in place a data sharing agreement that follows best practice?
  • Do we retain a clear and up-to-date understanding of “data journeys” such that we can, where needed, take meaningful steps to delete the data in the event that we find it is used for human rights abuses?
  • If we transmit data from customer devices, or allow messaging between users, do we have in place end-to-end encryption to prevent third parties from decrypting conversations? Have we developed an approach that takes into account the human rights benefits that can come from allowing third parties to scan for content (such as the ability to support legitimate criminal investigations)?
  • If we face a risk of government demands for data where this may be used to abuse human rights, have we:
  • Are our executives prepared for a breach? Have we done scenario planning and trained all relevant teams about what to do in the event of data breaches? In particular, do we have a clear action plan to ensure we inform our customers or users of breaches as fast as possible?
  • Do we have a comprehensive plan in place to respond to breaches, and specify how we’ll handle informing stakeholders? Are we clear on how we will provide for remedy if our actions contribute to the violation of user, customer, or employee privacy or other rights?

Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

  • Privacy Policy Hubs: Several businesses are building “hubs” for their privacy policies. Hubs are a dedicated area where data subjects (visitors to a website, customers, users) can go to view: how their data is being used; where it’s being used; how their data is being collected and what type; terms of the policy; and where subjects can revoke consent.
    • Disney’s privacy hub also states how they protect children – their largest and most at-risk audience.
    • Twitter’s privacy site includes information about how users’ tweets, location, and personal information are used.
  • Cisco’s Trust and Transparency Center Online. In 2015, Cisco launched the Trust and Transparency Center online, which is dedicated to providing information, resources and answers to cybersecurity questions and to help manage security and privacy risk. The Centre includes Cisco’s Trust Principles, which describe their commitment to protect customer, product and company information, and it provides information about security policies and data protection programs.
  • Participation in the Global Network Initiative: GNI is a multi- stakeholder initiative comprising companies, civil society organizations, investors and academics. GNI provides a framework to help ICT companies respect privacy rights, integrate privacy policies and procedures into corporate culture and decision making and communicate privacy practices with users. Members commit to an independent assessment process about how GNI principles are integrated within their organization.
  • T-Mobile Do Not Sell Links: The California Consumer Privacy Act (2018) requires companies to post a clear and conspicuous link on their website that says, “Do Not Sell My Personal Information” through which consumers can opt out of the sale of their data to third parties. Some companies, like T-Mobile, apply this for all customers in the United States.
  • Using Leverage to Regulate Data Brokers: In the United States, some business leaders (most notably Apple CEO Tim Cook) have called for a registry of data brokers to make their role in the collection, storing and selling of personal data more transparent and accountable.
  • The Microsoft Digital Crimes Unit: Microsoft’s digital crimes unit exists to “fight against cybercrime to protect customers and promote trust in Microsoft.” It operates globally through the application of technology, forensics, civil actions, criminal referrals, and public/private partnerships and is staffed by “an international team of attorneys, investigators, data scientists, engineers, analysts and business professionals located in 20 countries.”

Alternative Models
  • Consumer Products and Services: A number of companies have launched privacy-oriented alternatives such as:
    • Messaging App Signal: One of the only apps that has its privacy-preserving technology always enabled and ensures that there is never a risk of sharing moments or sending messages to a non-intended recipient. For more on messaging apps see this article.
    • Search Engine Swisscows: Swisscows does not collect any of their visitors’ personal information such as an IP address, browser information, or device information. They do not record or analyze search terms. The only data that Swisscows records is the total number of search requests it receives each day.
  • Enterprise Solutions: A 2020 World Economic Briefing, A New Paradigm for the Business of Data, profiles a small number of Enterprise and consumer solutions that place privacy, user consent and data security at the core. These include:
    • Hewlett Packard Enterprise (HPE) and Continental: HPE and Continental have created the Data Exchange Platform as a marketplace for mobility data. “It provides a secure, transparent, decentralized architecture for trusted vehicle sensor data sharing and payment, based on blockchain technology and smart contracts. It offers data sovereignty and includes a consent- management system for drivers.”
    • Inrupt: “Instead of a company storing siloed snippets of personal data on their servers, users store it in interoperable online data stores giving them unprecedented choices over how their data is shared and used. They can, for example, share their fitness data with their health insurance company, or allow sharing between their thermostat and air conditioner. They can set time limits on sharing and change their choices at any time.”
Other tools and resources

Red Flag 15. Business relationships with limited influence to address risk to people

RED FLAG # 15

Structuring business partnerships in ways that limit the company’s ability to influence decisions or actions that affect the rights of stakeholders.

For Example
  • Structuring JV partnerships such that the company situates control over decisions on land, employment and/or responses to community concerns with the business partner
  • Structuring client-advisor relationships such that then scope of advice excludes consideration of impacts on people
  • Structuring multi-bank syndicated loans such that a participating bank relies on the due diligence of a lead arranger or E&S (environment and social) coordinating bank
  • Utilizing franchise models in which labor, land acquisition and other rights-relevant issues are not covered by franchise contracts
Higher-Risk Sectors
  • Finance industry
  • Law firms
  • Mining industry
  • Franchised food and beverage companies
  • Construction industry
  • Hospitality and restaurants
  • Oil and Gas
  • A variety of services provided in the context of large extractive industry projects, pipelines, energy projects, agribusiness and forestry projects that take place on indigenous and marginalized communities’ land around the world, in both developed and developing countries.
Questions for Leaders
  • How does the company know whether and when the structure of its relationships with business partners may be reducing its ability to ensure that salient human rights risks are effectively managed?
  • How does the company use its leverage at the point of structuring a relationship and defining the roles and responsibilities of different business partners to help ensure human rights risks will be well managed?
  • How does the company discuss and make decisions about the viability of business partnerships where there is no evident way to mitigate salient human rights risks?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People

The way in which companies decide to structure their business relationships can have an effect on their ability to meet their human rights responsibilities. In particular, companies may routinely structure relationships in ways that limit their leverage over business partners.

Below are examples of ways in which companies structure relationships that may lead to a reduction in their ability to identify, prevent, mitigate and account for human rights impacts, or may reduce their perception of their responsibility to do so.

  • In a syndicated loan, this may arise where the bank:
    • relies on human rights due diligence conducted or commissioned by another participating bank in the syndicate;
    • has little (direct) interaction with the E&S coordinating bank and/or the other participating banks on human rights impacts;
    • has little interaction with stakeholders potentially affected by the project or those representing their interests
    • has no influence over the creation or effective management of grievance mechanisms for affected stakeholders.
  • In a JV partnership, this may arise where one party takes sole or primary responsibility for communication and dispute resolution with third parties, or where a company situates control over decisions on land and employment with the partner. This can be particularly problematic where the partner with this responsibility is an enterprise wholly or partially owned by a government that has a history of causing or ignoring impacts on vulnerable groups in the country, and the company has little practical leverage available to it.
  • In a franchising relationship, this may arise where contracts retain franchisor control over businesses’ methods, procedures and standards, but not set out requirements on – nor accept responsibility for – rights-related issues such as employment practices, land acquisition, and environmental issues.
  • In an advisory relationship, such as a lawyer-client relationship, this may arise where the advisor limits (or accept their client’s instructions to limit) their advice to exclude some or all potential impacts on human rights, at best closing the door to an important avenue for leverage held by advisors, and at worst playing a role in rendering it more likely that the client will impact rights through the relevant activities. (See related discussion on the role of the corporate legal advisor here).

In circumstances such as those above, a responsibility gap can emerge where neither business partner is engaged with addressing potential impacts, or where the contractual responsibility to do so is situated with a partner less able to do so. Further, a remedy gap emerges where neither business partner engages with grievances, impacting stakeholders’ right to remedy.

Risks to the Business
  • Operational, Financial and Reputational Risks: A company’s understanding and implementation of its own responsibility in relation to impacts can be undermined when it structures a relationship in ways that limit its own scope for action and its accountability.
    • For example, risks can arise where there are mistaken assumptions that due diligence conducted or commissioned by the E&S coordinating bank in a syndicated loan for project finance is sufficiently thorough. High profile examples of community conflict halting projects have highlighted that each financier is expected to know (and to show) that the HRDD conducted meets expectations: according to Banktrack, banks participating in the financing of the Dakota Access Pipeline “found themselves on the receiving end of the #DefundDAPL divestment campaign after the project violated Indigenous People’s rights – estimated to have cost them between US$8 and $20 billion in deposit withdrawals.”
  • Legal Risks: The have been several lawsuits seeking to hold US company McDonald’s responsible for the treatment of franchise workers. In the United States the responsibility of franchisors to assume responsibility for employment conditions is a contested area. The company has stated that “franchisees are independent businesses that want to make their own decisions about hiring, pay and other matters.” Worker advocacy groups have “argued that many companies use contracting and franchising as ashield from responsibility for workers who make their business possible.” In 2020, a complaint was brought to the Dutch National Contact Point against McDonald’s on the basis that the company had not met OECD guidelines which “require due diligence by institutional shareholders in companies to ensure responsible business conduct.” The complainants alleged that due to “systemic sexual harassment” at franchised restaurants, the company had “neglected to act to create a safe workplace” for franchise employees.
  • Business Opportunity Risks: Where advisors do not advise clients appropriately on the human rights risks associated with corporate decisions or activity, they risk losing repeat business when that advice proves inadequate in practice. The International Bar Association notes that:
    • “There is growing recognition that a strong business case exists for respecting human rights and that the management of risks, including legal risks, increasingly means that lawyers, and particularly business lawyers, need to take human rights into account in their advice and services. The UNGPs are relevant to many areas of business legal practice, including but not limited to corporate governance, reporting and disclosure, litigation and dispute resolution, contracts and agreements, land acquisition, development and use, resource exploration and extraction, labour and employment, tax, intellectual property, lobbying, bilateral treaty negotiation, and arbitration.”
What the UN Guiding Principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

The parties to a business relationship may decide to allocate formal responsibilities in a particular way in their agreements – including responsibilities for identifying and addressing human rights risks. However, that does not remove them from any responsibility should human rights harms occur. For example, a company will still have a responsibility as a result of being linked to (and in some cases potentially contributing to) human rights impacts:

  • In the context of a JV:
    • whether it is a majority or minority stakeholder;
    • whether or not it has primary responsibility for communication and dispute resolution with third parties;
  • In the context of advice to clients:
    • regardless of unilateral or agreed caveats with respect to what the advice does and does not address;
  • In the context of syndicated loans for project finance:
    • regardless of decisions on who will conduct/lead due diligence.

Similarly, a franchisor will still be linked (or potentially contributing) to impacts caused by franchisees vis-à-vis franchise employees.

Business relationships that are structured in these ways will typically affect the company’s ability to exercise leverage to mitigate human rights risks or impacts unless specific measures are included to address this. Where human rights impacts were foreseeable and the company still took on a role where its control or leverage was limited, this may be seen to suggest that the company contributed by omission to impacts caused by a business partner.

Possible Contributions to the SDGs

Where a company retains and uses leverage with business partners to strengthen respect for human rights, it can contribute to various SDGs. It may also build the capacity of its partners to contribute to the SDGs, by helping them understand and implement their own responsibilities, thereby contributing to:

SDG 17: Partnerships for the Goals, in particular: Target 17.6 Enhance the global partnership for sustainable development, complemented by multi-stakeholder partnerships that mobilize and share knowledge, expertise, technology and financial resources, to support the achievement of the sustainable development goals in all countries, in particular developing countries. Target 17.17 Encourage and promote effective public, public-private and civil society partnerships, building on the experience and resourcing strategies of partnerships.

Taking Action

Due Diligence Lines of Inquiry
  • Do we clearly communicate our human rights expectations to our partners?
  • For joint ventures with significant human rights risks, do we ensure that legal and other agreements underpinning the ventures provide the necessary basis to ensure that human rights are respected in their operations? (See OHCHR and Business Dilemmas Forum)? For example:
    • How do our agreements with partners allocate roles with relevance to the human rights of stakeholders, such as decisions on land,employment or dispute resolution with third parties?
    • How do we ensure our partners carry out these roles in ways that respect human rights?
    • Do we have pre-agreement on how human rights incidents and disputes will be dealt with, once they arise?
    • Do we have the right to conduct audits of overall human rights compliance?
    • Do we have the right to terminate the agreement in the event that human rights non-compliances are identified during such audits and are not rectified within a reasonable amount of time?
  • How thorough are our due diligence procedures and do they include human rights risks? Do we tend to defer to or rely on processes of another partner without our own investigations? Are we prohibited from making contact with stakeholders by our agreements with business partners? How do we identify gaps between others’ processes and international human rights standards? How do we address these gaps? Do we look for early opportunities (e.g. at point of market entry) to create leverage? Do we include a leverage mapping into our due diligence procedure?
  • Does the structure or duration of the relationship significantly limit our leverage?
  • Do we have or participate in an effective grievance mechanism through which affected persons can raise human rights issues related to our partners’ activities?
  • Do our agreements with partners contain confidentiality or consent requirements that constrain our ability to disclose information about our operations in higher risk areas? If so how do we ensure that stakeholders have access to information relevant to understanding how they may be affected and to claiming their rights?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

There are numerous examples of a company seeking to influence the behavior of a business partner, including where that partner has primary responsibility for areas that impact rights.

(The following anonymized examples are adapted from Shift’s publication, Using Leverage in Business Relationships to Reduce Human Rights Risks).

  • Shadowing Partners: A company has shadowed a joint venture partner as it conducted a stakeholder engagement.
  • Seconding Staff: A company has seconded staff to a JV operation to lead on community relations and/or human rights risk management.
  • Shared Audits: A company has conducted an internal audit of its own human rights performance at an operation, and shared results with key business partners, with an invitation/ offer to collaborate with them on addressing shared challenges, as well as on future such audits.

In the context of syndicated loans, responsible banks individually evaluate projects or borrowers against their own human rights and project-specific policies, including to address gaps between standards applied by the E&S (environment and social) coordinating bank and expectations under the UN Guiding Principles. Even where a bank has a smaller ticket in a syndicated loan, recognized expertise in the field of social impacts has allowed such banks to exert outsize leverage with other participating banks to ensure potential social impacts are adequately considered and addressed.

  • Contract Provisions: Companies have negotiated various human rights-related provisions in contracts with business partners that created leverage later in the relationship. Examples include contract provisions that:
    • set out a commitment to meet certain standards (e.g., Voluntary Principles on Security and Human Rights, IFC Performance Standards);
    • give the company (even when a junior partner) the lead in managing human rights-related issues or in staffing the community relations function at an extractive project;
    • require a higher voting majority of the board on human rights-related issues.
  • Company Policies and Code of Conducts: Companies have negotiated the inclusion of references to their own standards or policies in joint agreements, such as a Code of Conduct or policies on security. In the context of non-operated joint ventures, Total reports that it “make[s] ongoing efforts so that the operating party applies equivalent principles to ours.”
  • Multi-stakeholder (Industry) Initiatives (MSIs) with Human Rights Commitments: A company may require or suggest that a partner join a credible multi-stakeholder (industry) initiative, or may jointly join an initiative with them: for example, PNG and FGB jointly joined the FLA in furtherance of “a desire to drive long-term change in the palm oil supply chain for the industry as a whole.” Companies have [also] highlighted partners’ existing commitments – including those made in the context of MSIs – when seeking to exert leverage to bring the partner’s attention to addressing impacts.
  • Introducing a Non-Essential Partner with Strong Standards: Companies have involved the International Finance Corporation as a small percentage financier of a project, so they could reference their Performance Standards in project contracts and in broader discussions with project partners.
  • Strategic Role: Some companies identify the committees with oversight of areas likely to be associated with salient human rights impacts associated with a joint venture (e.g. health and safety; procurement or sustainability), and ensure they play a strategic role in them, even when they are a minority partner.
  • Capacity Building: A company may extend training and other capacity and awareness building activities to partners and/or industry players to enhance and to bolster the likelihood of their conducting adequate human rights due diligence.
Alternative Models

There may be opportunities for increasing leverage to address actual and potential human rights impacts in a joint venture context through a coordinated approach. For example, in 2016 BHP created the Non-Operated Joint Ventures (NOJV) Asset within Minerals Americas in order to establish effective engagement with its joint venture partners and companies in line with BHP’s Charter. The Asset creates a single point of accountability with responsibility for all non-operated joint ventures in Minerals Americas and its purpose includes having transparency over JV companies’ risks and opportunities, in an active feedback process, whilst maintaining the JV company’s management independence.

Other tools and resources

General:

Joint Ventures:

Finance:

Project Finance:

Corporate Lending:

Legal Advice:

Red Flag 14. Commodities with unclear provenance and visibility to impacts on workers or communities

RED FLAG # 14

Commodities with unclear provenance and visibility to impacts on workers or communities.

For Example
  • Commodities traded on spot markets
  • Using resources such as the following in circumstances of limited traceability:
    • Energy (e.g. oil and petroleum and gas)
    • Metals and minerals (e.g. iron ore, copper, aluminum, gold)
    • Agricultural and other “soft” commodity products (e.g. coffee, cocoa, wheat, soybeans, cattle)
Higher-Risk Sectors
  • Commodity traders, including:
    • Trading companies
    • Companies with trading arms
    • Market-based/ financial sector commodity traders
  • Companies using commodities in process of manufactured products, including:
    • Agricultural commodities:
      • Food and beverage industry
      • Fast moving consumer goods industry
    • Metals and precious stones:
      • Jewelry companies (metals and precious stones)
      • Electronics industry
    • Minerals (e.g mica):
      • Electronics industry
      • Automotive industry
      • Paints and coatings industry
      • Cosmetics and personal care industry
      • Construction industry
Questions for leaders
  • How does the company find out about human rights risks associated with the commodities on which it relies? Does it do so at the stage of product design or sourcing? What does it do to address the risks it finds?
  • What is the company’s view on building longer-term sourcing commitments for the commodities on which it relies in order to make them more traceable?
  • Is the company doing anything to be able to trace the supply chain for commodities in terms of their source, transportation, storage and refining/processing?
  • To what extent does the company’s value proposition rely on the price of an agricultural commodity being depressed below levels deemed sufficient to sustain living incomes/ wages? Does the business model rely on substantial market power to drive down pricing? (See further Red Flag 19).

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People
  • IHRB notes that commodities can be associated with adverse human rights impacts “at the point of production or extraction e.g. unfair working conditions, activities taking place in absence of adequate community consent, child and forced labor, health and safety abuses, discrimination of migrant workers, resettlement of communities without Free, Prior and Informed Consent (FPIC), abuses of public/private security forces infringing workers’, indigenous peoples’, and communities’ rights.” In addition, where lowest cost is the largest business driver, e.g. in the commodities market, farmers, fishermen and smallholders have limited influence in negotiating terms of trade and receive an ever-diminishing share of the fruits of their labor. (See further Red Flags 1 and 19).
  • As just one example, sheet mining of mica is a labor-intensive process, and is predominantly carried out by the very poor and vulnerable in low-wage countries. Mica mining, particularly in illegal small-scale artisanal mines, has been associated with child labor; 22,000 child laborers were identified in two areas of India, which, geographically, covered less than half of the so-called “mica mining belt.”
  • Where commodities of unknown provenance are bought, sold, traded and hedged, purchasing companies in the value chain focus on price, defined specifications and quality standards rather than where the materials came from or under what conditions they were produced. It becomes difficult for companies upstream in the value chain to influence these decisions so as to address potential negative impacts on the rights of people in the value chain.
  • Transparency, shortening of supply chains and longer-term commitments from buyers can “demystify complex supply chains,” and allow “different actors [to] identify and minimize risks and improve conditions on the ground and inform whether and where progress is being made.”
Risks to The Business
  • Business Continuity Risks: Extreme price pressure on farmers and other workers at source can undermine availability of product and stability of supply.
  • Reputational, Operational and Legal Risks: The company risks being involved in business relationships with disreputable organizations or individuals, including groups using forced or child labor or providing unsafe working environments, or may be financially supporting conflict. Operational challenges and even legal risks can arise where such connections come to light and the business must act reactively to exclude such sources from their value chain. Where traceability to individual companies is limited, entire industries can face civil society pressure to improve (e.g. in the case of palm oil).
  • Business Opportunity: Focusing on improved livelihoods for people within the supply chain helps to bring them into the consumer base; failure to do so foregoes this opportunity. Opportunities for price reduction and new sources can be unlocked:
    • Barry Parkin, Chief Procurement and Sustainability Officer of Mars, has noted that supply chains are “broken.” In an article arguing that the “commodity era is over,” he identifies win-win opportunities to “mov[e] beyond commodities that are bought and sold in markets where the lowest cost is the largest business driver,” and “[shift] to long-term models for corporate buying that are anchored on building mutuality, reliability, resilience and risk management into the core of our buying patterns.”
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

  • Companies risk being directly linked to human rights impacts as a result of unknown and therefore unaddressed practices associated with the commodities going into their products.
  • Where companies ought to be aware of risks associated with commodities incorporated in their products, including, for example, where a commodity is overwhelmingly sourced from one location where it is associated with human rights impacts, the company may be contributing to impacts if it fails to use its leverage to try to address the impacts, either alone, or in collaboration with others.
Possible Contrubutions to the SDGs

Addressing impacts on people associated with this red flag indicator can contribute to a variety of SDGs, depending on the impacts associated with the commodities. This may include, for example:

SDG 1: Eradication of poverty in all its forms.

SDG 8: Promote sustained, inclusive and sustainable economic growth, full and productive employment and decent work for all, in particular: Target 8.7 Eradication of forced labor, modern slavery and human trafficking, securing the prohibition and elimination of the worst forms of child labor, including the recruitment and use of child soldiers, and ending child labor in all its forms by 2025.

SDG 10: Reduce inequality within and among countries.

SDG 12: Ensure sustainable consumption and production patterns, in particular: Target 12.6 Encourage companies, especially large and transnational companies, to adopt sustainable practices and to integrate sustainability information into their reporting cycle.

SDG 16: Promote peaceful and inclusive societies for sustainable development, provide access to justice for all and build effective, accountable and inclusive institutions at all levels, in particular: Target 16.2 End abuse, exploitation, trafficking, and all forms of violence against and torture of children.

Taking Action

Due Diligence Lines of Inquiry
  • Which commodities that we use may be of higher risk from a human rights perspective, based on known information about potential source countries?
  • Where information about impacts associated with the commodity is scant, how can we learn from known information about human rights impacts associated with other commodities sourced from the same area?
  • Which partnerships, including with peers, international organizations, academics or NGOs, can we leverage to gain greater transparency or ensure traceability? Where no initiatives exist, can we create one?
  • What opportunities exist/ can we create to build longer-term sourcing relationships?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

  • In 2018, the BMW Group and Codelco, a Chilean copper mining company, signed an agreement to cooperate on a sustainable and transparent supply of copper. In the “decommoditized” copper market, prices reflect differences in levels of certification.
  • Many large consumer goods companies are disclosing the source of their palm oil through the Roundtable on Sustainable Palm Oil, including Unilever, which, in 2018 announced that it was “the first consumer goods company to publicly disclose the suppliers and mills it sources from” (both directly and indirectly), and Nestle, which has committed to achieving RSPO sustainable certification for 100% of its palm oil by 2023. In November 2019, the RSPO announced “shared responsibility” rules, that will require RSPO members who buy palm oil to increase the proportion of their sustainable purchases by 15% every year or face fines and possible suspension.
  • Rather than prioritizing short-term electricity contracts, Mars is establishing long-term, country-level contracts in Mexico, the United Kingdom and the United States in an effort to contribute to addressing the environmental and social impacts of climate change. In this way, “electricity is no longer a commodity, but a long-term investment within which business is a market maker not simply a price taker.”
Alternative Models
  • A growing share of food commodities are now marketed as value-added (sustainable) products. California-based B-Corp Uncommon Cacao supplies raw cocoa beans to artisan chocolate makers disconnected from world market prices. It aims to provide a transparent alternative to commodity exchange and certified cocoa by setting fixed farm gate and export prices annually to help farmer incomes grow.
  • An impact investing fund created by Danone, Firmenich, Mars and Veolia with respect to vanilla, offers a 10-year commitment, cooperative and a minimum price, through an “innovative model where formers and industry players share both the benefits and risks.” The project estimates that 60% of cured vanilla’s value will go back to farmers (compared to initially observed shares of 5% to 20%).

Other tools and Resources
  • The BHRRC has launched an updated Transition Minerals Tracker tool, which provides information on the human rights implications of the six key commodities vital to the transition to a net-zero carbon economy.

Red Flag 13. Depleting natural resources or public goods such that it undermines access or health

RED FLAG # 13

Depleting natural resources or public goods such that it undermines access or health.

For Example
  • Harvesting of wild flora by agricultural or pharmaceutical companies depleting traditional food sources for indigenous communities
  • Extractive projects leading to an influx of people that places stress on local services, such as in communities near mine sites
  • Tech companies establishing large corporate headquarters in urban areas and reducing access to affordable housing
  • Manufacturing activities that lead to pollution of the water, soil or air at levels that have an impact on people’s health
  • Water extraction by food and beverage companies leading to water stress in a given catchment
Higher-Risk sectors
  • Extractive industries
  • Large-scale projects, e.g. hydropower projects, construction projects
  • Manufacturing
  • Agribusiness and industries that rely on agricultural commodities
  • Consumer products, including health and beauty products and supplement products which incorporate natural resources relied upon by indigenous populations
Questions for leaders
  • How does the company assess whether environmental, housing and other relevant laws and regulations where it operates or sources are sufficient, and sufficiently enforced, to protect human health, livelihoods and other human needs?
  • How does the company assess whether that is the case when it comes to cumulative impacts from multiple users of resources, and not just for individual users?
  • Where local laws and regulations are not sufficient, or not sufficiently enforced, how does the company assess whether such impacts may be occurring due to the added demands of its own business or supply chain?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People
  • Impacts on people through resource depletion or emissions into air and watersheds can occur as a result of individual or collective corporate activities.
    • The activities of individual companies may, for example, overtax a resource, particularly in an existing context of scarcity. While individual corporate activity is more typically regulated than cumulative impacts (see below) this is not the case in all geographies (e.g. rural areas in some geographies).
    • A company may also contribute to cumulative impacts (a total impact that is the result of the actions of more than one actor) where it is one of several actors involved in an impact that depletes, destroys, pollutes or otherwise damages a resource or access to that resource.
  • In both cases, this can lead to impacts on people’s health and livelihoods. People most commonly affected by corporate resource include those in physical proximity to sites of corporate activity, such as in the vicinity of extractive projects, hydropower and construction projects, large farms or plantations or large corporate headquarters in urban areas.
  • Government authorities “frequently fail to undertake cumulative/ strategic impact assessments, and even where such assessments are undertaken, human rights information relevant to such assessments is not taken into account” (OHCHR).
  • Corporate activities may be associated with:
    • Reduced water availability for local communities (Right to health).
    • Long-term health problems amongst local people as a result of their own emissions, or as contributors to cumulative air and water emissions from multiple industrial facilities concentrated into a single area (Right to health).
    • Water emissions from a single factor or several factories that flow into a single waterway – reducing fish stocks and undermining local livelihoods and nutrition (Right to adequate standard of living (right to food).
    • Price inflation, pressures on social services and affordable house and increased levels of anti-social behaviour in towns near to or hosting extractive projects that attract a large influx (“in-migration”) of actual/aspiring workers and their families (e.g. housing, rents and access to medical services). (Right an adequate standard of living (right to housing)).
    • Scarcity of resources for indigenous or other local communities, where a company contributes to harvesting of, e.g. a plant for use in products (Indigenous peoples’ rights).
Risks to the Business
  • Reputational Risks: Cumulative impacts often generate considerable attention and multinational corporations can be targeted for criticism, particularly where people believe that approaches to governments may have little effect.
  • Legal Risks: Companies that do not address their impacts can face legal action for their contribution, or preemptive action to prevent it (as has been seen in the case of concerted action to prevent multinational companies from creating bottling plants – and drawing on water – in India).
  • Regulatory Risks: Where management of a resource is unsatisfactory, public pressure can lead to regulation creating taxes, limits or prohibitions on use of the resource.
  • Operational Risks: The IFC notes that:
    “[o]ne of the biggest risk management challenges currently facing project developers in emerging markets is the appropriate assessment and management of cumulative impacts” and cites factors such as “climate change and unpredictability of climate patterns, increasing and competing water use demands, decline of species biodiversity, degradation of ecosystem services, and changing socio- economic circumstances” which it notes “add complexity to risk assessment and management.”
  • Financial Risks: Concerns over corporate resource use or emissions can lead to shut-downs with significant financial impacts. A multi-billion dollar mine expansion in Peru was abandoned over community concerns about water stress.
  • Business Continuity Risks: In the mid-2000s, protestors blocked a bridge over plans by two companies to build two pulp mills on the Uruguayan side of the Rio Uruguay, citing concerns that the plants would generate pollution which could harm health of communities and destroy their main sources of income, including tourism and agriculture. One company ultimately decided to relocate its pulp mill to a different area of Uruguay and the remaining pulp mill was the subject of a 2010 ICJ judgment.
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

The State has a duty to protect its people from harm to their health and other human rights, through appropriate regional planning and/or industry-wide regulation. However, States are not always able or willing to manage impacts: corruption may interfere with the management of single corporate impacts, for example, or the government may have a lack of technical capacity to understand and manage complex cumulative impacts. Notwithstanding, companies have a responsibility to address such impacts.

Cumulative impacts (also known as “collective impacts”) are one of the two ways in a company can contribute to impacts. (See OHCHR at page 16).

Situations can arise in which companies are directly linked to such impacts by way of their products, services or business relationships. Examples would include food and beverage companies that reply on agribusiness where resource based impacts occur, and companies in various industries that rely on other commodities extracted in association with such impacts. In some circumstances, foreseeability of the relevant impacts and a lack of mitigation measures can, over time, lead to a situation of contribution.

Possible Contributions to the SDGs

SDG 6: Ensure availability and sustainable management of water and sanitation for all, in particular: Target 6.3 By 2030, improve water quality by reducing pollution, eliminating dumping and minimizing release of hazardous chemicals and materials, halving the proportion of untreated wastewater and substantially increasing recycling and safe reuse globally. Target 6.4 By 2030, substantially increase water-use efficiency across all sectors and ensure sustainable withdrawals and supply of freshwater to address water scarcity and substantially reduce the number of people suffering from water scarcity.

SDG 12: Ensure sustainable consumption and production patterns, in particular: Target 12.6 Encourage companies, especially large and transnational companies, to adopt sustainable practices and to integrate sustainability information into their reporting cycle. Target 12.2 By 2030, achieve the sustainable management and efficient use of natural resources.

SDG 15: Sustainably manage forests, combat desertification, and halt and reverse land degradation and halt biodiversity loss.

Taking Action

Due Diligence Lines of Inquiry
  • How do we assess whether our use of resources, including natural resources, could impact vulnerable populations that need to benefit from those same resources?
  • Do we include in our assessments, the potential for contributing to these kinds of harm through cumulative impacts?
  • How do we assess baseline conditions and measure the incremental impact of our activities, products and services, including when added to other existing or planned projects and developments?
  • How do we engage with regulatory authorities and others to understand whether and how they mitigate these risks and measure the results?
  • Where these risks exist, what sort of leverage do we have to influence the situation and how might we increase that leverage at the start of any project or investment? Have we considered ways of increasing our leverage by acting in collaboration with others?
Alternate Models
  • Emissions and Waste (various): Closed-loop business models “keep products, components and materials at their highest utility and value – reducing the need for extracting and processing new resources and, in the process, cutting the related impacts on the environment” and people. See further UNGC Project Breakthrough.
  • Danone treats three key resources – water, milk and plastic – as part of closed loops, with a senior executive overseeing Danone’s cross-divisional, cross-functional, Strategic Resources Cycles Unit.
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

  • The CEO Water Mandate: Shift and the Pacific Institute (Mandate secretariat) partnered on bringing a UNGPs lens to company efforts to respect the human rights to water and sanitation. Endorsers of the CEO Water Mandate commit to continuous progress against six core elements of stewardship and in so doing understand and manage their own water risks.
  • A company in the food and beverage industry considering entry into Myanmar identified, among other things, potential impacts that could arise from reliance on extracted ground-water at one plant near a village which also depended on groundwater for domestic and livelihood use. The company’s actions in response included upgrading wastewater treatment stations at both plants, and conducting assessments of local water sources. (See further CEO Water Mandate at p.78).
  • Rio Tinto’s, Why human rights matter: a resource guide for integrating human rights into Communities and Social Performance work at Rio Tinto (page 37) describes how the company incorporates its potential contribution to cumulative human rights impacts into its assessment of the social impact of mining, metals and associated operations.
Other Tools and Resources

General

  • UN Global Compact (2014) Cumulative Impacts on Human Rights: UNGC webinar addressing the “challenges and best practices in respect of cumulative human rights impacts.” Includes contributions from UNU, Shift, First Peoples’ Worldwide, Rio Tinto and Anglo American.
  • Cumulative Human Rights Impacts in the Maplecroft/ UN Global Compact Human Rights and Business Dilemmas Forum: Contains scenarios, examples, case studies and suggestions for business in relation to the question, “How should a responsible company identify and address its incremental contribution to a cumulative human rights impact, particularly an impact on an individual or a community that is the result of the combined actions of several actors?”
  • IFC (2013) Good Practice Handbook Cumulative Impact Assessment and Management: Guidance for the Private Sector in Emerging Markets: Contains guidance concerning cumulative impact assessment in the context of an ESIA (environmental and social impact assessment) or stand-alone CIA (cumulative impact assessment). Powerpoint summary also available.
  • UN Working Group on Business and Human Rights Expert Roundtable on Cumulative Human Rights Impacts.

Sector Specific Examples

Impact specific example (Water Usage):

Red Flag 12. Land use in countries in which ownership may be contested

RED FLAG # 12

Land use in countries in which ownership is often contested or records are unreliable or land users such as indigenous groups are unrecognized.

For Example

Relying on land use – including for extractive projects, the provision of commodities, or construction – in locations where:

  • Indigenous peoples have traditional ownership or useof land
  • ethnic/minority groups have historically been denied or dispossessed of formal land ownership rights
  • women may not have access to legal land ownership
  • owners of land may have been otherwise dispossessed or moved without consultation or adequate compensation
Higher-Risk Sectors
  • Large-scale infrastructure (e.g. ports, roads, urban development)
  • Telecommunications (e.g. phone and transmission lines; masts and towers)
  • Energy (e.g. dams, wind farms, power plants)
  • Extractives (e.g. mines, oil and gas installations, pipelines)
  • Forestry (e.g. timber extraction, pulp and paper)
  • Industrial farming (e.g. crops, livestock, irrigation projects,)
  • Tourism (e.g. resort areas)
Questions for Leaders
  • How does the company confirm that the land acquisitions or use rights granted in higher risk geographies do not in fact infringe legal or traditional ownership or use rights?
  • How does the company ensure that it does not participate in or benefit from improper forced relocations, and adequately compensates inhabitants in voluntary relocations?
  • How does the company ensure that potentially impacted communities have access to safe and effective ways to raise land- related concerns with the company?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People
Risks to the Business

Operational, Reputational and Financial Risks: Research shows that company-community conflicts may generate the same broad impacts on companies as technical problems, contractual or regulatory disputes, or environmental or safety breakdowns, although they typically do not receive equivalent attention or resources. Protests, blockades, property damage, public campaigns can lead to increased staff time on crisis management, lost productivity and value, work stoppages, project suspension or abandonment, that all increase costs for the business, including through the loss of future opportunities. For a world-class mining project, community conflict will cost roughly US$20 million per week of delayed production.

Legal and Regulatory Risks: Companies acquiring or using land that results in communities getting displaced expose themselves to lawsuits and formal complaints. For example:

What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

A company may contribute to negative impacts where it acquires land from a State or a third party in circumstances in which it is, or should be, aware that there may be competing claims to the land and does not conduct proper due diligence to investigate land ownership and consult with affected groups. It may also contribute to impacts where it makes it more difficult or impossible for the rightful owners to access and benefit from the acquired land.

A company may cause impacts where it fails to conduct resettlement processes in line with human rights standards and due process, including the use of excessive force to remove people from land it has acquired. It could also cause negative impacts on people’s human rights where it fails to provide adequate remedy for any damage to land, property, water access and quality, or land-based livelihoods resulting from its activities.

Companies downstream of land usage in their supply chain may be linked to land-related impacts by way of their products or services. For example, a company in the food and beverage industry that purchases agricultural commodities through a food processing company, or directly from a sugar grower or other agricultural company, may be linked to land related abuses occurring at source. Moreover, linkage may occur when a company acquires or uses disputed land despite having taken reasonable measures to verify that the land titles were fully legitimate and not the result of dispossession or any other type of denial of ownership by rightful communities.

In cases of linkage, once the company becomes aware of the claims, it may move into a situation of contribution over time if it takes no action to investigate and/or address the impact.

 

Possible Contributions to the SDGs

According to the Voluntary Guidelines on the Governance of Tenure, published by the UN FAO, securing land tenure rights and ensuring responsible land governance is key to achieving the SDGs. Addressing impacts to people associated with this red flag can contribute to, inter alia:

SDG 1: End poverty in all its forms everywhere, in particular: Target 1.4 By 2030, ensure that all men and women, in particular the poor and the vulnerable, have equal rights to economic resources, as well as access to basic services, ownership and control over land and other forms of property, inheritance, natural resources, appropriate new technology and financial services, including microfinance

SDG 2: End hunger, achieve food security and improved nutrition, and promote sustainable agriculture, in particular Target 2.3 By 2030, double the agricultural productivity and incomes of small-scale food producers, in particular women, indigenous peoples, family farmers, pastoralists and fishers, including through secure and equal access to land, other productive resources and inputs, knowledge, financial services, markets and opportunities for value addition and non-farm employment

SDG 5: Achieve gender equality and empower all women and girls, in particular Target 5.a.1. Proportion of total agricultural population with ownership or secure rights over agricultural land, by sex; (b) Share of women among owners or rights-bearers of agricultural land, by type of tenure. Target 5.a.2. Proportion of countries where the legal framework (including customary law) guarantees women’s equal rights to land ownership and/or control.

Taking Action

Due Diligence Lines of Inquiry

Due Diligence Lines of Inquiry adapted from the Danish Institute for Human Rights’ Human Rights Compliance Assessment Quick Check.

  • Are the State policies and laws that ensure tenure rights non-discriminatory and gender sensitive? Does the State ensure equal tenure rights for women and men, including the right to inherit and pass on these rights?
  • Does the State recognize as indigenous any groups that claim indigenous status and does it recognize indigenous people’s rights with regard to land, as set out in the Declaration on the Rights of Indigenous peoples?
  • Before purchasing land, did we investigate all existing claims and conflicts and consult with all affected parties, including both legal and customary owners, and if indigenous peoples are involved, did we obtain their free, prior and informed consent?
  • Considering that government maps do not always accurately reflect the traditional land usage of indigenous peoples, are we verifying this information, such as with the help of a person with deep expertise in and understanding of indigenous cultures and local tenure arrangements?
  • When purchasing or leasing property from governments or large- scale land owners, did we investigate past occupation of the land to ensure that no forced relocations had been performed, unless done in conformity with international standards?
  • Do we conduct due diligence with regard to the ownership and usage of land from which we derive key commodities or services through our supply chain, where such land is in regions with weak protections for traditional land rights or a history of land- related conflicts?
  • Do we ensure that we do not participate in or benefit from improper forced relocations, and that we adequately compensate inhabitants involved in voluntary relocations?
  • Does the company honor the rights of local or indigenous peoples on company-controlled land?
  • Are our employees and security personnel trained to interact appropriately with indigenous and other local communities, allowing safe and unimpeded use of the land and its resources without harassment or intimidation?
  • Do we have on-going processes in place to engage with local communities in order to understand any land-related impacts that may arise from our activities? Are we confident that local communities – women as well as men – feel able to raise issues with the company as part of those dialogues?
  • Does the company have a broader community engagement or indigenous people’s policy and process, which includes the principle of Free, Prior and Informed Consent?
  • Do we have processes in place to integrate issues raised by communities into company decision-making in a timely fashion?
  • Does the State provide access to impartial and competent judicial and administrative bodies to resolve disputes over tenure rights, including effective remedies where appropriate?
  • Do we have mechanisms for hearing, processing, and settling any grievances of local communities? How confident are we that communities trust those mechanisms and feel able to use them in practice?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

  • There are a growing number of examples of multi- stakeholder collaboration to tackle systemic risks related to land. For example, Illovo Sugar Africa, the largest sugar producer in Africa and subsidiary of AB Sugar in the UK, has come together with NGOs, governments and global donors to improve land tenure rights in the countries where it operates. The Maragra project, based around a plantation in Mozambique, targeted about 1,600 farmers to “make them more aware of their rights under Mozambique’s land laws; recorded the rights of smallholder farmers through a process of community land mapping; and created a robust grievance mechanism for farmers and the local community.”
  • B2 Gold identified resettlement is a salient issue at its Fekola mine in Mali, specifically the potential for lost access or rights to land, or disruption to livelihoods. It developed a Resettlement Action Plan (RAP) and a resettlement-specific ESIA. The company established a community grievance mechanism with appeal available to a multi-stakeholder Resettlement Committee and further appeal to regional government development committee. The option to pursue the complaint through the formal legal system was available to complainants throughout. B2Gold reported that themechanism allowed it to “adjust and improve its approach throughout the resettlement process.”
  • Establishing conflict resolution mechanisms and properly addressing competing claims to the land can help counter- balance the often unfair or inadequate procedures that allow commercial interests or the local privileged to prevent community land claims from being formalized.
  • Instead of or in addition to social investments in schools and/or health facilities, “practitioners are stressing the importance of an “intelligent” community relations spend that focuses on hiring the right staff who are committed to building the kinds of relationships with local communities that prevent and mitigate the risk of conflict.” (See Costs of Conflict and Getting it Right: Making Corporate-Community Relations Work).
  • ‘Front-end loading’ a budget for community relations to help address social risks provides an opportunity for the community relations function to influence the risk picture of the project as a whole.” (Also see Costs of Conflict).
Alternative Models
  • Some of the alternative models that companies have explored are joint land ownership between communities and companies, as well as options for combining lease and profit-sharing. Land management contracts that prioritize profit-sharing may be an improvement on flat-rate leases. Outgrower arrangements can function as a method of compensation or an alternative to outright land purchase or lease; Landesa offers various resources including a review of best practices literature.
  • Land-based joint-ventures may encourage entry into more competitive commercial agriculture by disadvantaged smallholders and community landowners. However, strong support is needed to ensure their capacity to make business decisions and realize sufficiently near-term returns or livelihood benefits. Canada offers several examples of joint ventures between First Nations businesses and logging companies. See this guide on benefit sharing agreements written for indigenous peoples, businesses and governments.
Other Tools and resources

Guidance for Companies

Key Standards

Other Useful Materials

Red Flag 11. Speed in developing products or services, or delivering projects with risks to health and safety

RED FLAG # 11

Speed in developing products or services, or delivering projects, with risks to health and safety.

For Example
  • Setting extremely abridged timelines for product development in order to meet launch dates or to be first to market, for example, when undertaking rapid product development in the tech sector, leading to workers working excessive hours
  • Requiring excessive speeds for the manufacture or processing of goods such as meat & poultry or other fast- moving consumer goods, impacting the safety or other working conditions of workers
  • Requiring speed from workers to meet commitments made to clients, such as providing round-the-clock responsiveness to client requests in legal advice, management consultancy or other client services, affecting the family life of workers
  • Providing or changing orders to suppliers with insufficient lead time for capacity planning, impacting the health, safety and wages of supply chain workers
  • Placing excessive pressure on suppliers for speed in production in the lead up to events, or to meet seasonal demand, such as in the harvesting of seasonal agricultural commodities
  • Expediting R&D for new or updated products/services to market, leaving insufficient time to test for potential impacts on users/customers
  • Delivering construction projects with unattainable schedules or particularly inflexible deadlines (e.g. associated with large sporting events)
Higher-Risk Sectors
  • Apparel
  • Companies with labor-intensive production lines, such as beef, pork and poultry processing plants
  • Tech, including start-ups pursuing rapid growth
  • Fast-moving consumer goods
  • Food and beverage companies
  • Toy companies
  • Law firms
  • Management consultants, PR firms, advertising agencies, accounting firms and other client services industries
  • Construction, including in the context of particularly time-bound projects such as mega sporting events
Questions For Leaders
  • How does the company understand whether and to what extent the incorporation of speed in the value proposition impacts the human rights of workers, suppliers or other business partners?
  • How does the company ensure that demands for speed in the R&D process leave sufficient time for considering and mitigating potential unintended impacts on customers/end users?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People

Speed is a key element of the value proposition and value chain in many business models. For some, speed is “the most important thing for [a] business”; it is “everything in business.” Speed in product innovation, speed to market, speed in delivery, speed in the preparation of targeted marketing campaigns that react to cultural events: the importance of speed as a competitive advantage is said to be increasing, with commentators stating that “with the pace at which society progresses, companies have to do whatever it takes to stay relevant.”

Demands for speed in the business model become problematic from a rights perspective when they are absorbed in ways that place undue pressure on vulnerable people in the company’s operations and value chain. Demands for speed can have effects across the value chain, often on the most vulnerable people – such as young workers; factory workers, including migrant workers and women workers; and small-holder farmers. Some examples of impacts are below, with impacts on workers’ right to health, right to just and favorable conditions of work (including rest, leisure and adequate limitation of working hours), right to a family life, and in some cases where excessive hours are demanded, right to fair wages or right to a living wage for hours worked.

  • Client Services Firms may promise delivery of services to clients in ways that place undue pressure on workers, often at a junior level in the organization, leading to excessive hours and/or round-the-clock availability with resulting risks to physical and mental health. This is exacerbated when factors such as the high price of services and/or representations by partners in the firm to clients, create an understanding that the firm will respond to client demands immediately at all hours.
  • Tech Companies for which providing the “latest” updates or functionality is a key part of the value proposition, or tech start- ups with a “grow fast or die” mindset, pursuing “hockey-stick growth”, can “burn through employees” as workers become mentally or physically unable to maintain the work-levels expected.
  • For production line jobs, intense pressure to keep up with production can risk injury and disabling illness.
    • In 2019 Human Rights Watch reported high rates of serious injury and chronic illness among workers at chicken, hog, and cattle slaughtering and processing plants; interviews with workers found that “nearly all the interviewed workers identified production speed as the factor that made their job dangerous.” Advocacy organizations in the US have expressed concern about risks increasing as the “government has also proposed regulations that would bring in new inspection systems and eliminate caps on slaughter line speeds.”
  • For apparel companies or FMCG companies speed of product innovation and delivery may be a key element of the value proposition and be reflected in purchasing practices. If not addressed through effective mitigation measures, this can adversely impact the health, safety and/or income of workers at various tiers of the supply chain as the pressure ripples throughout the value chain. For example:
    • Supply chain factories given short lead times can feel obliged to require workers to work unreasonable hours, or to discriminate against pregnant workers on the basis that they cannot meet such demands. (See also Red Flag 1).
    • Logistics providers can work to unreasonable deadlines or schedules. (See also Red Flag 2).
    • Farmers or others working at the level of cultivating raw materials can face sudden and unmeetable demands for increased supply.
    • Factories producing seasonal products, such as Christmas toys, can require excessive overtime of workers.
    • In the construction industry, schedule pressure and deadlines can erode safety and promote risk-taking. One of the many contexts in which this can be observed is the “extreme pressure that often characterises the construction phase prior to mega sporting events.” For example, in 2016 the Guardian reported that the Chief Inspector of Labor Conditions for the 2016 Rio Olympic Games had criticized the organizers of the Rio Olympics at a memorial service for 11 workers killed on construction projects, stating that “rushed construction caused by delays and poor planning was the primary factor in the high number of fatalities on Games-related infrastructure projects.”
Risks to the business
  • Financial and Business Continuity Risks:
    • Where taken to the extreme, speed of roll-outs has been noted as a factor in “tech product launch fail[ures].”
    • Where workers reach the limits of their capacity to absorb demands for greater speed, continued demands risk injuring and/or alienating the workforce. Employees may resist through the only means available where appropriate avenues to discuss the impacts of speed are unavailable: in the poultry processing industry, following injuries and unmet requests from workers to slow line speeds, “workers began jamming chicken bones into the machinery to stop the processing line. It was the only way they could get some relief from the frantic pace.” (See Southern Poverty Law Centre).
  • Operational and Reputational Risks: Where excessive speed is built into the business model, it can undermine sustainability efforts at the operational level. Moreover, increasingly savvy consumers, advocacy organizations and investors are looking beyond individual sustainability initiatives and programs and are quick to label them “greenwashing” if they perceive that the business model continues to increase risk of negative impacts.
  • Reputational Risks: The prefix “fast” has developed negative connotations when associated with products (and industries producing such products) due to concerns about both environmental impacts and impacts on supply chain workers, as well as community and worker health.
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

Where a company demands excessive speed from its workers, it may cause impacts on their health, safety or other working conditions. The company may also cause impacts if products are unsafe due to excessive speed in R&D phases.

Where a company’s purchasing practices create demands for speed in the supply chain, they may contribute to impacts caused by suppliers at different tiers in their chain, in their efforts to comply with these demands.

Possible contributions to the SDGs

Addressing impacts to people associated with this red flag can contribute to, inter alia:

SDG 8: Decent Work and Economic Growth, in particular Target 8.8 on protecting, “labor rights and promot[ing] safe and secure working environments for all workers, including migrant workers, in particular women migrants, and those in precarious employment.” Engagement with the human dimensions of “fast” business models can have positive environmental impacts, and contribute to Target 8.4, “Improve progressively, through 2030, global resource efficiency in consumption and production and endeavour to decouple economic growth from environmental degradation, in accordance with the 10- year framework of programmes on sustainable consumption and production, with developed countries taking the lead.”

Taking Action

Due Diligence lines of Inquiry
  • Can we map where demands for speed are originating – both internally and externally to our business?
  • How are demands for speed absorbed within our value chain and by whom? How do we know whether or to what extent those pressures are passed onto vulnerable workers in our value chain?
  • How do we attempt to avoid or reduce such impacts and how do we know whether we are succeeding?
  • What channels do we have for hearing concerns from our own workers, and workers in our value chain, related to any impacts from demands for speed, and to hear their views on how we could reduce these impacts? How do we know whether people feel able to use them?
  • Do we involve internal human rights experts at the R&D stage to help identify potential risks to people from rapid product roll-outs and adaptations?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

Speed in the Supply Chain

Speed in Meeting Deadlines for Construction

  • In the construction context, researchers studying strategies to counter the effects of schedule pressure highlight the importance of, for example, attainable schedules, proactive planning and extensive communication with workers. Simulation models have highlighted two critical success factors for safety management in construction operations: managing rework and schedule delays. See further here.
Alternative Models
  • In the tech world, some have called for alternative business models, particularly for start-ups, that reframe success as long-term or organic growth.
  • In apparel and FMCG, various “slow” movements have recognized the social and environmental advantages of reducing the speed imperative from the business model.
  • The “slow food” movement encourages the consumption of organically grown regional produce at accessible prices for consumers and fair conditions and pay for producers.
  • The “slow goods” movement applies slow movement principles to the concept, design and manufacturing of physical objects. It focuses on “low production runs, the usage of craftspeople within the process and on-shore manufacturing. Proponents of this philosophy seek and collaborate with smaller, local supply and service partners.” (Wikipedia).
    • Slow Fashion: Slow and Steady Wins the Race is a US clothing collection that creates classic garments and accessories made using simple, durable materials. The company introduces new styles at a regulated pace year-round, rather than the usual accelerated pace of the seasonal fashion schedule.
    • Various other examples, including Patagonia and Boden, are detailed in the article “35 Ethical & Sustainable Clothing Brands Betting Against Fast Fashion” here.
Other tools and Resources

On Production Lines

On Technology-based Start-ups

On Construction

Red Flag 9. Products that harm when misused

RED FLAG # 9

Offering products or services that when misused can have adverse impacts on human rights.

For Example Group 33 Created with Sketch. (

Several examples in this Red Flag are drawn from the UN Global Compact’s Good Practice Note, prepared by Meaghan Malloy, entitled, Addressing Adverse Human Rights Impacts Connected to Product Misuse.

)
  • Selling “dual use” products, services or technology (such as those normally used for civilian purposes, but which may also have military applications)
  • Providing tracking or facial recognition technologies that may be misused to profile, intimidate or arbitrarily imprison human rights defenders or activists
  • Providing pharmaceuticals that may be misused for the death penalty
  • Providing heavy machinery or equipment to governments for use in locations recognized under international law as occupied territories
  • Selling ultrasound technology to health facilities that may misuse it for sex selective abortions
  • Providing social media platforms, that may be misused for harassment or to incite hatred (see also Red Flag 6)

Higher-Risk Sectors
  • ICT, in particular, surveillance technologies, social media and telecommunications
  • Pharmaceuticals
  • Heavy Machinery
  • Chemical
  • Medical technology
  • Geographies with a record of abuses of a type relevant to the company’s product or service
Questions for Leaders
  • How does the company find out about, and keep up to date on, the risk of its products being misused in ways that impact human rights?
  • What safeguards and procedures are in place to prevent and mitigate situations of misuse of products?
  • How does the company assess whether intermediaries or agents are likely to facilitate product/service misuse by end users?
  • How does the company ensure that incentives to maximize sales and other business opportunities do not reduce the chances of identifying and preventing harmful misuse of products or services?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People
  • Risks to people are heightened by the nexus between products that are vulnerable to misuse and sales to entities likely to misuse them.
  • Interviews with business and civil society representatives conducted by the UN Global Compact “underscored that one of the biggest challenges in conceptualizing product misuse as a human rights issue is the vast array of ways, including non-obvious ways, a product or service can be misused and inflict human rights harm.”
  • Several examples are listed above and include severe impacts, such as:
    • sale of pharmaceuticals misused for the administration of the death penalty (right to life; right to freedom from torture, cruel, inhuman or degrading treatment);
    • sale of tracking or facial recognition technologies that may be misused to surveil civil society or arbitrarily imprison, e.g. ethnic or political groups. (Freedom from arbitrary arrest, detention or exile and/or freedom from torture and inhuman or degrading treatment).
Risks to the Business
  • Reputational Risks: Links between well-known companies and the impacts of product misuse are more easily spread through the 24/7 news cycle and the sharing of incidents and photographs facilitated by mainstream and social media. During the Arab Spring, the role of Western Technology firms in “helping Arab dictators” was highlighted in US media. Popular opinion increasingly places some degree of responsibility on the companies concerned, and not just on those misusing the product or service, or on regulators.
  • Financial Risks: These may include investor divestment or customer boycotts where companies are seen to be failing to address product misuse. In 2012, construction machinery company Caterpillar was removed from three MSCI indexes for factors including “an ongoing controversy associated with use of the company’s equipment in the occupied Palestinian territories.”
  • Legal, Financial and Operational: Risks also arise, for example, where end users include repressive regimes. Blacklisting of Chinese technology companies by the US Government on the grounds of rights violations against Muslim minority groups in Xinjiang, China, disallows US companies from selling technology to these companies without a US government license. In 2019, Sony and Sharp faced scrutiny for the alleged supply of parts to a Chinese video surveillance company blacklisted by the United States over human rights violations of ethnic Uyghur people in the Xinjiang Autonomous Region of China. The blacklisted company had “previously stated on its website that it could identify members of the Uighur ethnic minority group.”
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

This red flag arises in two distinct situations, namely where the business relies on:

  • sales to a known commercial customer where there is a likelihood it will misuse the product in ways that have human rights impacts, or sell it onwards to an end-user who misuses the product
  • sale of a product or service to the general public, where there is recognized misuse by a minority.

With regards to scenario a), Guiding Principle 13(b) states that businesses should “seek to prevent or mitigate adverse human
rights impacts that are directly linked to their operations, products or services by their business relationships, even if they have not contributed to those impacts.” Business relationships include relationships with commercial customers, and as such, a company may be directly linked to an impact caused by commercial customers in the course of using the product or service.

In certain circumstances, product misuse by a commercial customer may involve a situation of contributing to harm where a company knows of the risk or fact of its products being misused, and does nothing to address the situation. The UN Global Compact describes a scenario in which a company sets up a shell company in order to hide the fact that it is selling surveillance technology to repressive governments. If the company knew or should have known that the governments concerned were likely to use the product to impact human rights, yet proceeded with a sale that enables this, it may be considered to contribute to any harm suffered.

In scenario b), the scope of the company’s human rights responsibility includes the safety of people using its products, even if they are not the intended user. As such, if the company is – or should be – aware of a potential negative impact associated with its products, a failure to adapt the product or otherwise seek to minimize the risk of the impacts occurring (e.g. through terms and conditions of use, warnings on packaging or instructions etc.) could place the company in a situation of causing an impact, or, where the impact on a third party is caused by a consumer misusing its products, contributing to the impact.

Possible contributions to the SDGs

Addressing impacts to people associated with this red flag indicator can contribute to a range of SDGs depending on the industry and impact concerned, for example:

SDG 3: Good Health and Well-Being.

SDG 9: Industry, innovation and infrastructure, in particular Target 9.1: Develop quality, reliable, sustainable and resilient infrastructure, including regional and transborder infrastructure, to support economic development and human well-being, with a focus on affordable and equitable access for all.

SDG 10: Reduced Inequalities, in particular Target 10.2: By 2030, empower and promote the social, economic and political inclusion of all, irrespective of age, sex, disability, race, ethnicity, origin, religion or economic or other status.

SDG 11: Sustainable Cities and Communities, in particular Target 11.3: By 2030, enhance inclusive and sustainable urbanization and capacity for participatory, integrated and sustainable human settlement planning and management in all countries.

SDG 12: Responsible Consumption and Production.

SDG 16: Peace, Justice and Strong Institutions, in particular Target 16.1: Significantly reduce all forms of violence and related death rates everywhere. Target 16.6: Develop effective, accountable and transparent institutions at all levels. Target 16.7: Ensure responsive, inclusive, participatory and representative decision-making at all levels.

 

Taking Action

Due Diligence Lines of Inquiry
  • How do we assess the potential risk of product misuse? How do we understand and address the ways in which “specific variables in design, components or materials used, and markets and customers targeted” may lead to product misuse resulting in human rights impacts?
  • How do we know which of our end users/customers are high risk from a product misuse perspective? How do we stay abreast of developments that affect the level of risk? What systems do we have in place to identify and address such risks, prior to sale? Has the company considered how it might work with others – regulators, industry peers, customers, civil society organizations etc. – to seek ways to minimize the potential misuse of its products?
  • Do we build safeguards against product misuse into our agreements with business customers, end-users and intermediaries involved in the sale of our products/services? Have we considered how we could use contract clauses or service provisions to monitor usage?
  • How do we track and report internally or externally on our efforts to ensure responsible use of our products and/or services?
Mitigation Examples

* Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

  • Where the red flag relates to sales to a known commercial customer where there is a likelihood they will misuse it in ways that have human rights impacts, mitigation has involved attempting to influence their use of the product or limiting sales to that customer:
    • Misuse of Pharmaceutical Drugs for the Death Penalty: Drug companies have adopted controls on the distribution of their products to ensure that none are used in lethal injections. In 2016 Pfizer announced that it will restrict the sale of relevant drugs to selected wholesalers who must certify that they will not resell the drugs to corrections departments in the United States. Following Pfizer’s announcement it was reported that all Food and Drug Administration-approved manufacturers of any potential execution drugs have blocked their sale for the purpose of lethal injection.
    • Misuse of Ultrasound Technology in Sex-selective Abortions: GE discovered that its portable ultrasound machines, which enable access to life-saving medical treatment in remote regions, were being used by some facilities in India, in contravention of local law, to determine the sex of fetuses to enable early abortion of those that are female. This reflected strong social preferences for male children in India. In response, the company strengthened training to sales agents, added an explicit warning about national legal requirements in all sales contracts and on the machines themselves, engaged with NGOs and other local stakeholders, pushed for industry-wide collaboration and collaborated in a public education campaign on women and girls’ rights.
    • Where the red flag relates to the sale of a product or service to the general public and where there is recognized misuse by a minority of users, mitigation examples have involved adapting the product to protect the wider public against that potential misuse.
Other tools and Resources

Red Flag 8. Products that harm when overused

RED FLAG # 8

Offering products or services that when overused, can affect people’s health, particularly when targeted at vulnerable populations.

For example
  • Marketing high salt/sugar foods to children or disproportionately targeting minority communities with such options
  • High interest pay-day lenders clustering in minority communities or targeting minorities through online platforms
  • Selling alcoholic beverages, including when engaging in sponsorship activities in geographies without laws on exposure of children to alcohol-related marketing (see also Red Flag 23)
  • Offering social media platforms with features designed to maximize usage
Higher-Risk Sectors
  • Food and beverage industry
  • Alcoholic beverage industry
  • Pay-day loans industry
  • Video games industry
  • Social media
Questions for leaders
  • How does the company keep track of the risks of its products being overused in ways that impact human rights?
  • How does the company discuss internally and externally the tension between profit maximization and the adverse effects of overuse?
    • Does it take a market-by-market compliance approach or does it consider its performance against international human rights standards.
    • Does it focus on individual consumer responsibility, or does it seek to understand and act on its own role in overuse, including in marketing?
  • How does the company enable creative thinking about ways to prevent overuse of products leading to human rights impacts?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People
  • Several examples of the impact of overuse on people are listed below. The first three have the potential to impact the right to the highest attainable standard of health and further, where overuse intersects with certain vulnerable groups (children’s rights, or rights of minorities).
  • High-salt, High-sugar, High-fat Foods: High levels of consumption are associated with increased health risks, including obesity and other noncommunicable diseases, diet-related diseases in minority communities and rising costs of healthcare where those costs are passed on through higher premiums. Corporate activities that bring about an intersection of vulnerability and potential harm include:
    • Marketing to children, including online (esp. via social media) and SMS campaigning to school children at lunch time
    • Disproportionate targeting of minorities of low average income, including through selective advertising in specific language media and/or billboards in minority communities. The University of Connecticut Rudd Centre for Food Policy and Obesity has conducted a brand by brand analysis of targeting of black and Hispanic youth by major food and beverage companies in the United States and found that, “food-related marketing continues to disproportionately target youth of color with harmful products and contributes to health disparities affecting their communities.” They found that this was the case even where companies offer diverse portfolios of healthy and unhealthy brands in multiple categories.
  • Social Media and Young People: In the UK, a parliamentary committee released a report on the Impact of Social Media on Young People’s Mental Health and Wellbeing. After noting the range of positive effects of social media, it also highlighted “very damaging” effects, including, “feelings of low self-esteem and negative body-image, resulting in harmful behaviours to achieve, ‘results’… the publicising of self-harm methods…[and] cyberbullying” and called for further research into the potentially “‘addictive’ nature of social media.”
  • Alcohol: Overconsumption of alcohol can lead to well- documented health impacts in the short and long term. Moreover the US CDC notes that binge drinking is linked to, for example, “motor vehicle crashes” as well as “violence, including homicide, suicide, sexual assault, and intimate partner violence.” Any consumption by children is not recommended due to health impacts. The exposure of children to alcoholic beverage industry marketing is one key challenge.
  • High-interest Pay-day Loans: When loan repayments balloon in size and they have difficulty keeping up, recipients may be forced to choose between loans and basic needs, affecting their right to an adequate standard of living (see Human Rights Watch article). There can be a disproportionate effect on minority communities when lenders cluster in those areas, or target minorities through online platforms. Corporate activities that bring about an intersection of vulnerability and potential harm include:
    • Targeting potentially vulnerable individuals who are unlikely to meet repayment obligations.
    • Offering fin-tech services charging fees for access to advances, which, if regarded as interest, would equate to annualized interest payments many times higher than legal limits (See Nikkei Asian Review article).

Understanding how newer or less-studied products/services may have the potential to be connected to excessive, and even addictive, consumption is an evolving question.

Risks to the Business
  • Reputational Risk: Where companies target vulnerable groups in the marketing of products that are harmful when overused, reputational risk may arise. The University of Connecticut report cited above warned that while companies may “view advertising of nutritionally poor brands to multicultural consumers as a business opportunity,” the public may rightly focus on the resulting costs to these communities. Researchers and consumer groups have expressly compared such practices with companies’ public commitments to health, and apparent contradictions are noted and publicized. Moreover, increasingly sophisticated consumers and watch-dog NGOs:
    • Identify and publicly call-out companies seeking to focus blame for overconsumption on individuals, without acknowledging the impact of marketing practices.
    • Scrutinize non-profit or research bodies set up by industry members for evidence of intent to avoid responsibility for impacts associated with their products.
  • Legal and Regulatory Risk: As consumers and international bodies increasingly scrutinize companies selling products or services linked to impacts from overuse, lack of meaningful industry action increases the likelihood of further regulation in this area. For example, six [US] localities had enacted a “soda tax” in 2019, levying a per volume excise tax on drinks sweetened with sugar, and one government levied a per volume tax on all sweetened drinks. As scrutiny leads to consumers seeking to hold companies responsible for impacts, legal risks arise: one US-based pay-day loan company, for example, ceased operations to deal with legal challenges.
  • Financial Risks: Understanding of health impacts associated with overconsumption of products has been associated with decreased sales among certain demographics. However, at the same time, the link between overconsumption and profit remains in several industries. For example, a 2018 UK study concluded that the alcohol industry appears to be highly financially dependent upon heavy drinking, and might face significant financial losses were consumers to drink within guideline levels.
  • Business Opportunity Risk: Business partners may choose to disengage from companies with business models that are seen as carrying too high a risk from a human perspective. In August 2019, Google banned high-interest lenders from its Google Play app store.
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

In certain circumstances, service or product overuse may involve a situation of contributing to harm. For example, this may arise where there are foreseeable inherent risks in the service or product provided (e.g. it is potentially addictive) without appropriate mitigation. Contribution may also be relevant where the product or service is marketed in ways that disproportionately target vulnerable people (e.g. with advertising for nutritionally poor food and beverages, discussed “Risks to People” above.)

In the case of high-interest pay-day loans, where such loans target customers who the company knows, or would know with reasonable investigation, are unable to repay the loan, the company may cause an impact.

Possible Contributions to the SDGs

Addressing impacts to people associated with this red flag indicator can contribute to a range of SDGs depending on the impact concerned, for example:

SDG 3: Good Health and Well-Being, in particular, Target 3.4: By 2030, reduce by one third premature mortality from non-communicable diseases through prevention and treatment and promote mental health and well-being, and Target 3.5: Strengthen the prevention and treatment of substance abuse, including narcotic drug abuse and harmful use of alcohol.

SDG 10: Reduced Inequalities, in particular Target 10.2: By 2030, empower and promote the social, economic and political inclusion of all, irrespective of age, sex, disability, race, ethnicity, origin, religion or economic or other status.

SDG 12: Responsible Consumption and Production, in particular Target 12.8: By 2030, ensure that people everywhere have the relevant information and awareness for sustainable development and lifestyles in harmony with nature.

Taking Action

Due Diligence Lines of Inquiry
  • What systems do we have in place to identify and address the potential risk of product overuse?
  • How do we know which of our end users/customers are highest risk from a product overuse perspective? How does our marketing strategy intersect with these vulnerabilities?

On Food Marketing:

  • How does the nutritional quality of the products we advertise correlate with the age/ethnicity breakdown of our target consumers?
    • What percentage of our advertising expenditure is to media viewed predominantly by children? By minority communities?
    • Do we disproportionally target food of poor nutritional quality to particular groups?
  • Do we take a compliance approach to national labelling laws, or do we always conform to the highest international standards, including relevant human rights? Have we investigated whether there are gaps between voluntary industry self-regulatory programs and international standards?

On Pay-day Loans:

  • Would our “fees” be considered exorbitant or illegal if annualized as interest rates?
  • Are we operating in a legal grey zone? If so, are we comfortable that we are not profiting from such opportunities to the potential detriment of our customers’ rights?
  • What processes do we have in place to ensure that recipients of loans are able to meet repayment obligations?
  • Are we confident that our decisions on customer targeting/ shop front locations do not exacerbate or exploit existing vulnerabilities?
  • Are we carefully weighing the benefits of making credit more readily available (including through smartphone technology) with the potential negative impacts of greater availability on vulnerable consumers?
Mitigation Examples

* Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

Alternative Models
  • Alcoholic Beverages: With motivations ranging from the ethical, personal health, to purely commercial (noting that the number of people who consume alcohol in the world has decreased by nearly 5 percent since 2000), several brands and start-ups have begun offering non-alcoholic alternatives: Diageo (the world’s second largest distiller and parent of Guinness, Smirnoff and Johnnie Walker) recently funded a nonalcoholic spirits company called Seedlip.
Other Tools and Resources

Red Flag 7. Financial or advisory services that enable high-risk clients to cause harm

RED FLAG # 7

Providing finance or advice to clients where its use is likely to undermine human rights.

For Example
  • Providing finance to projects or borrowers where adverse impacts on communities are foreseeable
  • Providing legal advice premised on operating in legal gray areas or exploiting the lack of laws that are relevant to the protection of human rights
  • Providing management consultancy services to government clients that may enable corruption
  • Providing tax advice that supports the aggressive minimization of tax payments (See also Red Flag 24)

Higher-risk sectors
  • Finance
  • Legal services
  • Management consulting
  • Accountants
  • Insurance
  • Public relations firms
Questions for Leaders
  • How does the company identify clients with higher risk of association with human rights impacts? What are the triggers for review and/or periodic assessment and how are decisions elevated within the company where the risks are high?
  • Is there an example of a decision not to engage in, or to disengage from, a business relationship on the basis of human rights concerns?
  • Through what channels can employees raise concerns about clients and how does the company know whether they feel able to do so in practice?
  • If the company takes on a higher risk client, what does it do to minimize the chances of the company’s services enabling human rights impacts?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People

Financial or advisory services can enable companies to act in ways that increase the risk of impacts on people. Further, risks to people can arise even where financial or advisory services are provided in compliance with applicable laws and regulations. Some examples of human rights impacts connected to such services are listed below.

  • Providing finance, insurance or advice for large infrastructure or other projects requiring relocation of communities can, without proper mitigation measures, be associated with forced relocation, the loss of adequate housing and livelihoods, the destruction of sacred indigenous sites, environmental damage and violence against community members. Where the advice relates to a project or facility in a geography undergoing conflict, there is a risk of connection to impacts on the right to life. In the case of finance, risks can be exacerbated where a financier is a non-lead bank in cases of multi-bank syndicated loans for project finance. (See Red Flag 15).
  • In February 2021, the Telegraph reported that “consulting firm McKinsey has agreed to pay $573 million” in order “to settle claims by US states that the consulting company helped fuel the opioid epidemic by providing marketing advice to drugmakers including Purdue Pharma and Johnson & Johnson.”
  • Accounting and Taxation advice on aggressive, but legal, taxation minimization strategies can deprive governments of the resources needed to address poverty and to finance programs seeking to protect and fulfil rights. (See also Red Flag 24).
  • In relation to legal advice, risks can arise where there is a gap between domestic laws and international human rights standards. For example, advice to employers in relation to legal tactics to undermine labor rights can negatively impact the practical enjoyment of those rights, e.g. the right to collective bargaining. Advice on bringing certain claims under stabilization clauses in investment agreements with host governments (which provide protections for investors against future changes in law) can interfere with a State’s bona fide efforts to implement laws, regulations or policies in a non-discriminatory manner in order to meet its human rights obligations.
Risks to the Business
  • Reputational Risks: Connection to severe human rights impacts can have reputational effects for financial and advisory service providers; where such connections are repeated or persist over time, it can lead to public questioning of the company’s social license to operate. In 2018 a Forbes opinion article cited connections to human rights impacts as the basis for asserting that “McKinsey & Co fails as a global leader.” At worst, it can bring an entire industry into disrepute. In 2020 an investigative article relying on the Luanda Leaks asserted that “consultants, accountants and lawyers provided vital support at each step of the way” and argued for the need for greater regulation over the “key role Western professionals play in maintaining an offshore industry that drives money laundering and drains trillions from public coffers.” Civil society is increasingly highlighting the connection between finance and advisory services and impacts, most visibly in campaigns for divestment by banks from companies or projects associated with human rights impacts, such as in the case of banks lending to the private prison industry.
  • Financial Risks: In February 2021, the Telegraph reported that “consulting firm McKinsey has agreed to pay $573 million” in order “to settle claims by US states that the consulting company helped fuel the opioid epidemic by providing marketing advice to drugmakers including Purdue Pharma and Johnson & Johnson.” Banks can be required to compensate communities for adverse impacts connected to their finance: in 2020 an Australian bank agreed to contribute the money that it earned from a loan to a sugar company to Cambodian families that were forcibly displaced by the company, as a form of contribution to remedy. This followed a decision in which the Australian National Contact Point found that it was “difficult to reconcile” the bank’s decision to take on the client “with its own internal policies and procedures” as the risks would have been “readily apparent.” Financial risks can also arise where banking clients are unable to repay loans due to the high costs associated with conflict with communities proximate to projects. Finally, pressure associated with a service provider’s connection to a human rights impacts can lead to them finding it necessary to end a business relationship, (e.g. in the case of the Dakota Access Pipeline), with financial consequences for the company.
  • Business Opportunity Risks: Where advisors are unable to advise clients appropriately on the human rights risks associated with corporate decisions or activities, they risk losing business of increasingly sophisticated clients seeking these insights. The International Bar Association has noted that “lawyers, both as in-house counsel and as members of law firms, are increasingly asked to help businesses understand what the responsibility to respect human rights implies.” The Working Group on Business and Human Rights has noted a “[l]ack of understanding by some lawyers of the links between human rights risks, legal risks, commercial risk and reputational risks and, specifically, a failure to appreciate that, even where no material legal risks can be identified, that there can still be commercial and reputational consequences coming from a company’s behaviour, especially since the endorsement of the Guiding Principles and the growing focus … on the company’s performance on managing human rights risks.”
What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

  • While it is typically the client, rather than the provider of financial or advisory services, that is directly causing the harm to human rights in these contexts, the services provider is itself a business enterprise with a responsibility to respect human rights.
  • The service provider’s relationship to the impact is more likely to sit somewhere along the continuum between contribution and linkage. As noted by John Ruggie in the context of finance, a variety of factors can determine where on that continuum a particular instance may sit. They include the extent to which an advisor has enabled, encouraged, or motivated human rights harm by the client; the extent to which it could or should have known about such harm; and the quality of any mitigating steps it has taken to address it. Some examples are below:
    • If a company provides financial or advisory services to a client, and the client, in the context of using the services, acts in such a way that it causes (or is at risk of causing) an adverse impact, the services provider will be directly linked to the impact through its business relationships.
      • The UNGPs do not automatically require the service provider to end a relationship with a client as a result. Rather, they are expected to use their leverage – their influence over the client or other relevant parties – to seek to change the behaviors or practices causing the harm. If the company does not have sufficient leverage to influence the relevant parties, then it should seek to increase that leverage. And where the company cannot increase its leverage, it should consider disengagement from the relationship(s) taking into account several key factors, including whether disengagement would cause further human rights harms. (See Guiding Principle 19).
  • If a company knew or should have known about human rights risks inherent in a project for which it is providing financial or advisory services, but does not take adequate steps to seek to get its client to prevent or mitigate them, it may be considered to have facilitated – and thus contributed to – any impacts that occur. In such a case, the financier/advisor should:
    • cease its contribution,
    • use its leverage to mitigate any remaining impact to the greatest extent possible
    • provide for or participate in effective remedy processes.
    • Disengagement from the relationship will not, in many cases, be sufficient to fulfill the responsibility to provide remedy where the financier/advisor has contributed to impacts.
Possible Contributions to the SDGs

Providing financial or advisory services to companies or governments in a way that supports human rights standards – by helping them to understand their own responsibilities or by seeking to use leverage with the client where risks to people arise – can contribute to various SDGs, including, but not limited to:

SDG 8: On Decent Work and Economic Growth.

SDG 10: On Reducing Inequalities.

SDG 12: On Responsible Consumption and Production.

SDG 16: On Peace, Justice and Strong Institutions.

SDG 17: on Partnerships for the Goals.

In 2020, “leaders from a host of law firms from across the globe” as well as accountancy firms, were amongst leaders to endorse a UN statement on co-operation in support of sustainable development goals, recognizing the critical role they play in doing “business in a better world.”

Taking Action

Due Diligence Lines of Inquiry

Adapted from Shift’s, Human Rights Due Diligence in High Risk Circumstances: Practical Strategies for Businesses: Identifying potentially higher risk customers/clients.

Example Diagnostic Questions:

Concerning the customer/client

  • Do customers/clients have known and effective internal governance and accountability structures?
  • Do they have known and effective processes for managing environmental, social and human rights risks?
  • Do they have a record of, or reputation for, breaching the law?
  • Do they have a record of, or reputation for, negatively impacting human rights?
  • Are they known or likely to engage in corrupt practices?
  • Are they in conflict with stakeholders?
  • Is this a government owned or connected entity and does that suggest greater or lesser risk to human rights?

Does the structure or duration of the relationship significantly limit the business’ leverage?

Concerning the financial/advisory service provider

  • How often do we remain sensitive to changes in the operating environment and the scope of services being provided to the client? Do we reevaluate the risks:
    • prior to a new activity or relationship;
    • prior to major decisions or changes in the operation;
    • in response to or in anticipation of changes in the operating environment (e.g. rising social tensions)
    • periodically throughout the life of an activity or relationship?
  • How do we engage internal stakeholders (our people) in ways that:
    • raise awareness of high risk circumstances
    • create expectations about identifying and escalating these types of risks
    • address potential disincentives to raising issues (e.g. revenue targets or culture)
  • How do we use leverage with the client?
  • What avenues of leverage do we consider and explore with regards to clients where there is a risk of human rights impacts? For example, can we increase the leverage available in collaboration with other stakeholders (eg. via a syndicate or through industry initiatives?)
  • How do we track the effectiveness of our attempts to use leverage? How do we learn and adapt?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

Stregthening Due Diligence: Financial and advisory services providers can put in place robust processes to check the impulse to make decisions based on profit alone when it comes to accepting clients, and ensure potential connections to impacts on people are included as vital considerations. Moreover, human rights due diligence requires financial and advisory services companies to take action where they identify a connection to an impact, including by using leverage with clients to improve outcomes for people.

  • When it conducts due diligence on specific clients, Dutch bank ABN Amro uses a wide variety of sources that inform it about the views of local communities or unions. In the due diligence process, ABN’s assessment includes:
    • the client’s policies and practices in dealing with human rights relevant to its operations;
    • whether the client’s policies and practices follow international standards;
    • the client’s track record on respecting human rights
    • the client’s human rights due diligence processes and the monitoring of its human rights performance.
    • ABN also conducts regular training on due diligence (including escalation processes) for key departments involved in credit, front office, “Know Your Client” and credit risk processes; holds quarterly meetings between sustainability departments, business lines and senior management to discuss progress of human rights performance, and holds regular meetings between sustainability teams and business teams to enable smoother decision making at deal time. The bank has mapped the diamond value chain and used the results to issue client briefings and guides.
    • Insurer Allianz reports that it has developed a human rights due diligence process as part of its overall ESG approach, which is integrated into the broader risk management system. The due diligence process uses a combination of a sector- and country approaches and Allianz has developed thirteen ESG guidelines for sensitive business sectors, which include sector-specific human rights aspects.
    • In its “internal guide on human rights for mergers and acquisitions teams” Total demonstrates “recogni[tion] that human rights risk management needs to be integrated in legal risk management processes.” (See Working Group on Business and Human Rights).
  • Using Leverage: In 2017 bank ABN AMRO announced that it was attempting to use its influence over ETE (parent company of ETP, a contractor in the Dakota Access Pipeline) “to strongly stress the need for it to influence ETP with a view to reaching an agreement that is suitable for all parties impacted, and that this solution be accomplished without violence and with FPIC [Free Prior and Informed Consent] at the forefront.” It halted new business with ETE and announced that “[i]f such a solution is not achieved, the ultimate consequence will be discontinuation of the relationship.”
  • Collaborative Action: The banks that make up the Asia Pacific Banks Alliance have recognized the connection between finance and modern slavery via “retail accounts used to exchange funds with traffickers, forced labour in commercial supply chains, or investments being made in industries that have known issues with labour exploitation.” In collaboration with NGO The Mekong Club and the Thomson Reuters Foundation, they have developed modern slavery indicators tailored to the Asia-Pacific region, using case studies and data to inform outcomes and have “identified over 2000 victims of modern slavery.”
Other Tools and Resources

Finance:

  • The Dutch Banking Sector Agreement’s paper on Enabling Remediation gathers some of the most recent thinking in relation to:
    • how to understand the responsibility of a bank when connected to an impact through the activities of a client.
    • the practical roles banks could play and actions a bank could take to enable remedy in practice, across all forms of responsibility.
  • The Equator Principles Association’s EP4.

Legal Advice:

Taxation Advice:

  • The B Team’s Responsible Tax Principles were developed through dialogue with a group of leading companies, convened by The B Team with contributions from civil society, institutional investors and international institution representatives.

Red Flag 6. Providing online platforms with potential for online and offline harm

RED FLAG # 6

Providing online platforms for individuals to interact where use of the platform can lead to harm to human rights

For Example
  • Social media, messaging and online platforms through which individuals may post abusive content, form groups with the purpose of inciting hatred or violence, or engage in discriminatory practices
  • Platforms predominantly used by children and young people that allow users (including adults) to post videos and images of violent, sexual or dangerous behavior
  • Applications designed for use by specific groups that can increase the possibility of States surveilling and persecuting individuals from those groups (e.g. members of the LGBTQI community)
  • Online gaming sites where players may use related chat rooms to engage in misogynistic behavior, graphic language and imagery, and predatory child grooming and abuse
  • Online marketplaces through which individuals can refuse to do business – e.g. sell a service, exchange goods, offer jobs or rent property – with individuals of a certain ethnicity or sexual orientation
  • Adult websites to which individuals can upload videos or images of people without their consent, or illegal content such as of the sexual exploitation of children

Higher-Risk Sectors
  • Social media and messaging platforms
  • Web-based calling and video services
  • Online marketplaces and sharing economy platforms (such as online classified advertisements, dating, recruitment and real estate sites)
  • Platforms with high numbers of users being children and young people
  • Online gaming sites and related chat rooms
  • Cloud and hosting services companies offering the infrastructural backbone and computing power to businesses listed above
Questions for Leaders
  • How does the company assess whether its platform is, or risks, enabling human rights harms? Does this include a review of how strategies to increase user numbers, user engagement and revenue may undermine the company’s efforts to operate responsibly?
  • How does the company prevent the posting and spread of harmful content? Does it enable users or third parties in all markets to report harmful or abusive content and how does it respond to such reports?
  • Does the company have processes in place to engage with civil society and other experts to remain aware of the potential impacts on people of their platforms, and to explore any dilemmas that may arise in seeking to mitigate those risks?
  • Is the company engaging with peers and governments to help define industry standards and laws aimed at protecting against platform-related harms?

How to use this resource. Group 33 Created with Sketch. ( Click on the “+” sign to expand each section. You can use the side menu to return to the full list of red flags, download this Red Flag as a PDF or share this resource. )

Understanding Risks and Opportunities

Risks to People

Hate Speech, Harassment and Illegal Content
(Right to equality and non-discrimination; Right to life, liberty and security; Right to freedom of thought, conscience and religion; Right to Just and favorable conditions of work; Right to highest attainable standard of physical and mental health):

Mis-/Disinformation and Censorship
(Right to freedom of opinion and expression; Right to freedom of thought, conscience and religion; Right to free and fair elections):

“Ephemeral Post” Features that may exacerbate harm
(Right to Privacy; Right to freedom of opinion and expression; Right to equality and non discrimination)

  • Platforms like Snapchat pioneered the “ephemeral post” feature (followed by Facebook and Twitter), where messages and posts exist for only a certain period of time and then disappear “forever.” While billed as a way to support more private modes of sharing, experts acknowledge the added difficulty in monitoring and removing toxic or harmful content from more private interactions such as these.

Adverse Impacts on High-Risk Vulnerable Groups
(Right to Privacy; Right to highest attainable standard of physical and mental health; Right to Education):

  • Platforms predominantly used by young people (pre-teens, teenagers and young adults) may allow videos and posts that reflect or promote harmful behavior, such as bullying, extreme dieting, anorexia, drug use, body dysmorphia, and inappropriate content such as porn and suicide livestreams.
  • Platforms can expose young people to high-levels of targeted advertising and marketing with critics highlighting the inherent tension between advertising-based models that moderate content based on viewer engagement and content safety issues.
  • Online gaming sites and their connected chat rooms for players have in some instances become predatory grooming grounds for child abuse.
  • Dating platforms for the LGBTQI communities are vulnerable to data hacking and surveillance, and require additional security protections for their members.

Right to Equality and Non-discrimination
The introduction of technological platforms for transactions was expected by many to reduce or remove the inherent bias that can negatively affect the way that humans approach and conduct transactions with others. However, high profile studies and incidents have shown that discriminatory conduct has made its way into platform-based transactions, and in some cases, been exacerbated by platforms that institutionalize the discrimination.

  • In the rental housing market, landlords offering rooms for accommodation who refuse to host on the grounds of assumed ethnicity or gender identity have been identified in various studies. In Japan, real estate platforms that a) allow landlords to select “Foreigner accepted/not accepted” or b) do not remove such references by  landlords, can become connected to discrimination against non-Japanese. In the US, a A Harvard Business School study noted that, “applications [to Airbnb] from guests with distinctively African-American names are 16% less likely to be accepted relative to identical guests with distinctively White names.
  • Similarly, photos and names were implicated in a 2016 study, that found that drivers for ride sharing platforms Uber and Lyft were found to make Black clients wait longer before accepting their trip requests and that drivers were more likely to cancel on people with “Black-sounding” names.
  • Job advertisements on job search platforms may contain discriminatory content specifying, for example, desired age or gender in the job post. Laws regarding discrimination in employment vary, such that postings that violate the right to non-discrimination may be legal in some jurisdictions.
Risks to the Business
  • Regulatory and Legal Risks: Despite their vast reach, social media platforms have been described as “operat[ing] in a regulation-free zone,” and increasing lobbying efforts to maintain that status. Concerns about impacts on people are leading, however, to calls for increased regulation, including from some platforms themselves, with debate as to the form the regulation should take.
    • Recent movements towards regulating platforms include the upcoming UK Online Harms Bill, which will set out strict guidelines governing the removal of illegal content and setting out specific responsibilities with regard to children.
    • The EU Digital Services Act Package (Digital Services and Digital Markets Acts) was announced by the European Commission in December 2020, aimed at ensuring a safe, rights-respecting online space in Europe, and a level-playing field for technology innovation and competitiveness across the region, and bolstered by substantial fines and penalties.
  • Reputation and Legal Risks: Online platforms linked to discriminatory practices or content have seen legal challenges, boycotts and widely disseminated online campaigns.

 

What the UN guiding principles say

*For an explanation of how companies can be involved in human rights impacts, and their related responsibilities, see here.

A company operating an online platform can cause human rights harms when it takes or fails to take a decision that results in people being prevented from enjoying rights such as the right to privacy, right to information, freedom of expression or their right to be forgotten. Examples include where a platform filters out user content or closes user accounts erroneously, or when a major data breach occurs that violates user privacy.

Companies operating online platforms can also contribute to a range of human rights harms when the design and functionality of platforms facilitates or incentivizes third parties to engage in harmful behaviour. In this context, harms might be experienced by:

  • a user due to their own use or misuse of the platform.
  • a user because another actor has used, misused or abused the platform.
  • a third party due to how a user has used, misused or abused the platform.
Possible Contributions to the SDGs

Addressing impacts to people associated with this red flag indicator can positively contribute to a range of SDGs depending on the impact concerned, for example:

SDG 5: Achieve gender equality and empower all women and girls, in particular Target 5.1: “End all forms of discrimination against all women and girls everywhere.”

SDG 16: Promote peaceful and inclusive societies for sustainable development, provide access to justice for all and build effective, accountable and inclusive institutions at all levels, in particular, Target 16.1: Significantly reduce all forms of violence and related death rates everywhere, and Target 16.2: End abuse, exploitation, trafficking and all forms of violence against and torture including of children. Finally, Target 16.10: Ensure public access to information and protect fundamental freedoms, in accordance with national legislation and international agreements.

 

Taking Action

Due Diligence Lines of Inquiry
  • How do we identify, assess and address discriminatory or otherwise abusive behaviors on platforms? Have we engaged with potentially vulnerable groups to educate ourselves on how our processes can be improved to combat discrimination or otherwise abusive content by other users?
  • Do we make clear to platform users that discrimination or otherwise abusive behavior will not be tolerated? Have we incorporated this into user agreements? Do we have in place clear and detailed content moderation policies and processes to prevent viral spreading of discriminatory or otherwise abusive content?
  • Do we have counseling programs in place for employed content moderators, regularly exposed to harmful, explicit or distressing online content?
  • What are we doing to educate our users on what kind of content will and will not be tolerated on our platform?
  • What systems are in place to ensure discriminatory behavior or exploitative, non-consensual or otherwise abusive content or interaction are flagged and managed (e.g. removed or otherwise dealt with)?
  • What systems are in place to ensure that ads tied to crimes such as sexual exploitation, including of children, are prevented and dealt with, including through collaboration with the relevant authorities?
  • What measures do we take to ensure only age-appropriate content is served to our young users?
  • How do we track the effectiveness of our efforts to combat discrimination or other human rights impacts associated with our platform? What are the tests and metrics used?
  • Do we provide or participate in effective grievance mechanisms that are accessible to individuals and communities at risk of discrimination by our platforms?
  • Do we ensure transparency of processes, specifically with making user data available or with regard to content removal?
Mitigation Examples

*Mitigation examples are current or historical examples for reference, but do not offer insight into their relative maturity or effectiveness.

Online Platforms:

  • In the run up to the 2020 US elections, Facebook announced a range of steps they were taking to ensure the integrity of the elections including by removing misinformation, violence-inciting posts, the creation of a Voting Information Center, the development of a new hate speech policy, as well as political advertising blackout periods the week before and after the election.
  • Social media companies have been developing stronger moderation systems to flag, escalate and make decisions about discriminatory or otherwise abusive behavior (e.g. employing monitoring staff that are trained on the local context; convening groups of experts to monitor important topics, especially where hate speech or fake news can lead to serious harm). For example, Facebook has announced the use of AI to limit the spread of hate speech and improve the speed of its removal and, with others including Twitter, has joined the global pledge to fight hate speech online.
    • Content moderation: monitoring and removing content is, in principle, a viable risk mitigation strategy and many social media companies employ moderators to manage the related risks to people. However, a number of additional risks to people are inherent to this work: (1) privacy risks related to having your content, personal information and private interactions monitored; (2) censorship if companies make inappropriate or incorrect decisions; and (3) risk to the mental health of the content moderators who are regularly exposed to harmful, toxic and violent content.
  • Facebook and Twitter have created lead roles for human rights experts, and Facebook has reportedly commenced “making sure that people with human rights training are in the meetings where executives sign off on new product features.” Facebook has also created an Independent Oversight Board to take final and binding decisions on whether specific content should be allowed or removed from Facebook and Instagram. The Board considers content referred to it by both users and Facebook. Members contract directly with the Oversight Board, are not Facebook employees and cannot be removed by Facebook.
  • Online recruitment companies, such as LinkedIn, use a “multitude of tools and systems to proactively monitor content and identify activity that may be in violation of [their] policies,” deploying human reviewers where users identify and report discriminatory content in job postings.

Online Marketplaces: