Category: Privacy and data protection

Trustworthy Data Spaces: A Dialogue Between North and South (WTO Public Forum 2022)

Event description

Date: Thursday, 29th September, 15:45–17:00 CEST

Location: Room D, World Trade Organization (WTO), Geneva

Although data is non-rivalrous, data controllers have the capacity to restrict access to data for a myriad of reasons, such as protecting privacy, intellectual property, or to maintain a competitive edge.

At present, there are insufficient incentives for data to be shared by data controllers, and insufficient obligations for them to fulfil the social value of data.

This session will address data sharing and data flows from national and international perspectives. It aims to establish a bridge between proposals advanced by actors in the Global North and in the Global South, such as Switzerland’s proposal of trustworthy data spaces, Japan’s proposal of data free flows with trust and India’s notion of community data.

Participants will discuss how these different proposals could contribute to promoting a more equal distribution of benefits in the data economy and to shed light on current negotiations on data flows taking place at the WTO.

This event, which is part of the WTO’s Public Forum 2022, is being organised by Diplo, the Swiss Federal Office of Communications (OFCOM), and the Geneva Internet Platform.

Moderator: Marilia Maciel (Head, Digital Commerce and Internet Policy, Diplo)

Panellists:

  • Andrin Eichin (Swiss Federal Office of Communications (OFCOM))
  • Torbjörn Fredriksson (Head, E-commerce and Digital Economy Branch, UN Conference on Trade and Development (UNCTAD))
  • Simon J. Evenett (Professor of International Trade and Economic Development, University of St. Gallen, Switzerland)
  • Parminder Jeet Singh (Executive Director, IT for Change)

For more information about the WTO Public Forum 2022, visit the official page.

International Electrotechnical Commission

Acronym: IEC

Established: 1906

Address: 3 rue de Varembé, 1211 Geneva 20 , Switzerland

Website: https://www.iec.ch/

Stakeholder group: International and regional organisations

The IEC is the world leader in the preparation and publication of international standards for all electrical, electronic, and related technologies. A global, not-for-profit membership organisation, the IEC provides a neutral and independent institutional framework to over 170 countries, coordinating the work of more than 20,000 experts. We administer four IEC Conformity Assessment Systems, which represent the largest working multilateral agreement based on one-time testing of products globally. The members of each system certify that devices, systems, installations, services, and people perform as required.

IEC International Standards represent a global consensus of state-of-the-art know-how and expertise. Together with conformity assessment, they are foundational for international trade.

IEC Standards incorporate the needs of many stakeholders in every participating country and form the basis for testing and certification. Every member country, and all its stakeholders represented through the IEC National Committees has one vote and a say in what goes into an IEC International Standard.

Our work is used in the verification of the safety, performance, and interoperability of electric and electronic devices and systems such as mobile phones, refrigerators, office and medical equipment, or electricity generation. It also helps accelerate digitisation, arteficial inteligence (AI), or virtual reality applications; protects information technology (IT) and critical infrastructure systems from cyberattacks, and increases the safety of people and the environment.

 

Digital activities 

The IEC works to ensure that its activities have a global reach in order to meet all the challenges of digital transformation worldwide. The organisation covers an array of digital policy issues.

 

Digital policy issues

Artificial intelligence and the internet of things

AI applications are driving digital transformation across a diverse range of industries, including energy, healthcare, smart manufacturing, transport, and other strategic sectors that rely on IEC Standards and Conformity Assessment Systems. AI technologies allow insights and analytics that go far beyond the capabilities of legacy analytic systems.

For example, digital transformation of the grid is enabling increased automation, making it more efficient and able to integrate fluctuating renewable energy sources seamlessly. IEC Standards pave the way for the use of a variety of digital technologies relating to smart energy. They deal with issues such as the integration of renewable energies within the electrical network but also increased automatisation.

The IEC’s work in the area of AI takes a three-pronged approach. IEC experts focus on sector-specific needs (vertical standards) and conformity assessment, while the joint IEC and International Organization for Standardization (ISO) technical committee on AI, JTC1/SC 42, brings together technology experts, as well as ethicists, lawyers, social scientists, and others to develop generic and foundational standards (horizontal standards).

In addition, IEC Safety Standards are an essential element of the framework for AI applications in power utilities and smart manufacturing. IEC Conformity Assessment Systems complete the process by ensuring that the standards are properly implemented.

SC 42 addresses some of the concerns about the use and application of AI technologies. For example, data quality standards for ML and analytics are crucial for helping to ensure that applied technologies produce useful insights and eliminate faulty features.

Governance standards in AI and the business process framework for big data analytics address how the technologies can be governed and overseen from a management perspective. International standards in the areas of trustworthiness, ethics, and societal concerns will ensure responsible deployment.

The joint IEC and ISO technical committee also develop foundational standards for the IoT. Among other things, SC 41 standards promote interoperability, as well as architecture and a common vocabulary for the IoT.

 

Hardware

The IEC develops standards for many of the technologies that support digital transformation. Sensors, cloud, and edge computing are examples.

Advances in data acquisition systems are driving the growth of big data and AI use-cases. The IEC prepares standards relating to semiconductor devices, including sensors.

Sensors can be certified under the IEC Quality Assessment System for Electronic Components (IECQ), one of the four IEC Conformity Assessment Systems.

Cloud computing and its technologies have also supported the increase of AI applications. The joint IEC and ISO technical committee prepares standards for cloud computing including distributed platforms and edge devices, which are situated close to users and data collection points. The publications cover key requirements relating to data storage and recovery.

 

Building trust

International Standards play an important role in increasing trust in AI and help support public and private decision-making, not least because they are developed by a broad range of stakeholders. This helps to ensure that the IEC’s work strikes the right balance between the desire to deploy AI and other new technologies rapidly and the need to study their ethical implications.

The IEC has been working with a wide range of international, regional, and national organisations to develop new ways to bring stakeholders together to address the challenges of AI. These include the Swiss Federal Department of Foreign Affairs (FDFA) and the standards development organisations, ISO, and the International Telecommunication Union (ITU).

More than 500 participants followed the AI with Trust conference, in-person and online, to hear different stakeholder perspectives on the interplay between legislation, standards and conformity assessment. They followed use-case sessions on healthcare, sensor technology, and collaborative robots, and heard distinguished experts exchange ideas on how they could interoperate more efficiently to build trust in AI. The conference in Geneva was the first milestone of the AI with Trust initiative.

The IEC is also a founding member of the Open Community for Ethics in Autonomous and Intelligent Systems (OCEANIS). OCEANIS brings together standardisation organisations from around the world to enhance awareness of the role of standards in facilitating innovation and addressing issues related to ethics and values.

Read more

– e-tech

IEC and ISO Work on Artificial Intelligence

AI for the Last Mile

Computational Approaches for AI Systems

–  IEC Blog

Artificial Intelligence

–  Video

Ian Oppermann (AI with Trust)

AI with Trust conference interviews AI Governance

 

Network security and critical infrastructure

The IEC develops cybersecurity standards and conformity assessments for both IT and operational technology (OT). One of the biggest challenges today is that cybersecurity is often understood only in terms of IT, which leaves critical infrastructure, such as power utilities, transport systems, manufacturing plants and hospitals, vulnerable to cyberattacks.

Cyberattacks on IT and OT systems often have different consequences. The effects of cyberattacks on IT are generally economic, while cyberattacks on critical infrastructure can impact the environment, damage equipment, or even threaten public health and lives.

When implementing a cybersecurity strategy, it is essential to take the different priorities of cyber-physical and IT systems into account. The IEC provides relevant and specific guidance via two of the world’s best-known cybersecurity standards: IEC 62443 for cyber-physical systems and ISO/IEC 27001  for IT systems.

Both take a risk-based approach to cybersecurity, which is based on the concept that it is neither efficient nor sustainable to try to protect all assets in equal measure. Instead, users must identify what is most valuable and requires the greatest protection and identify vulnerabilities.

Conformity assessment provides further security by ensuring that the standards are implemented correctly: IECEE certification for IEC 62443 and IECQ for ISO/IEC 27001.

ISO/IEC 27001 for IT

IT security focuses in equal measure on protecting the confidentiality, integrity, and availability of data – the so-called CIA triad. Confidentiality is of paramount importance and information security management systems, such as the one described in ISO/IEC 27001, are designed to protect sensitive data, such as personally identifiable information (PII), intellectual property (IP), or credit card numbers, for example.

Implementing the information security management system (ISMS) described in ISO/IEC 27001 means embedding information security continuity in business continuity management systems. Organisations are shown how to plan and monitor the use of resources to identify attacks earlier and take steps more quickly to mitigate the initial impact.

IEC 62443 for OT

In cyber-physical systems, where IT and OT converge, the goal is to protect safety, integrity, availability, and confidentiality (SIAC). Industrial control and automation systems (ICAS) run in a loop to check continually that everything is functioning correctly.

The IEC 62443 series was developed because IT cybersecurity measures are not always appropriate for ICAS. ICAS are found in an ever-expanding range of domains and industries, including critical infrastructure, such as energy generation, water management, and the healthcare sector.

ICAS must run continuously to check that each component in an operational system is functioning correctly. Compared to IT systems, they have different performance and availability requirements and equipment lifetime.

Conformity assessment: IECEE

Many organisations are applying for the IEC System of Conformity Assessment Schemes for Electrotechnical Equipment and Components (IECEE) conformity assessment certification to verify that the requirements of IEC 62443 have been met.

IECEE provides a framework for assessments in line with IEC 62443, which specifies requirements for security capabilities, whether technical (security mechanisms) or process (human procedures) related. Successful recipients receive the IECEE industrial cybersecurity capability certificate of conformity.

Conformity assessment: IECQ

While certification to ISO/IEC 27001 has existed since the standard was published in 2013, it is only in recent years that the IEC Quality Assessment System for Electronic Components (IECQ), has set up a true single standardised way of assessing and certifying an ISMS to ISO/IEC 27001.

International standards such as IEC 62443 and ISO/IEC 27001 are based on industry best practices and reached by consensus. Conformity assessment confirms that they have been implemented correctly to ensure a safe and secure digital society.

Read more

Video

 

Social media channels

Facebook @InternationalElectrotechnicalCommission

LinkedIn @IECStandards

Pinterest @IECStandards

Twitter @IECStandards

YouTube @IEC – International Electrotechnical Commission

Office of the United Nations High Commissioner for Human Rights

Acronym: OHCHR

Address: Palais Wilson 52, Rue des Pâquis, 1201 Geneva, Switzerland

Website: https://www.ohchr.org/

Stakeholder group: International and regional organisations

The Office of the United Nations High Commissioner for Human Rights and other related UN human rights entities, namely the United Nations Human Rights Council, the Special Procedures, and the Treaty Bodies are considered together under this section.

The UN Human Rights Office is headed by the OHCHR and is the principal UN entity on human rights. Also known as UN Human Rights, it is part of the UN Secretariat. UN Human Rights has been mandated by the UN General Assembly (UNGA) to promote and protect all human rights. As such, it plays a crucial role in supporting the three fundamental pillars of the UN: peace and security, human rights, and development. UN Human Rights provides technical expertise and capacity development in regard to the implementation of human rights, and in this capacity assists governments in fulfilling their obligations.

UN Human Rights is associated with a number of other UN human rights entities. To illustrate, it serves as the secretariat for the UN Human Rights Council (UNHRC) and the Treaty Bodies. The UNHRC is a body of the UN that aims to promote the respect of human rights worldwide. It discusses thematic issues, and in addition to its ordinary session, it has the ability to hold special sessions on serious human rights violations and emergencies. The ten Treaty Bodies are committees of independent experts that monitor the implementation of the core international human rights treaties.

The UNHRC established the Special Procedures, which are made up of UN Special Rapporteurs (i.e. independent experts or working groups) working on a variety of human rights thematic issues and country situations to assist the efforts of the UNHRC through regular reporting and advice. The Universal Periodic Review (UPR), under the auspices of the UNHRC, is a unique process that involves a review of the human rights records of all UN member states, providing the opportunity for each state to declare what actions they have taken to improve the human rights situations in their countries. UN Human Rights also serves as the secretariat to the UPR process.

Certain non-governmental organisations (NGOs) and national human rights institutions participate as observers in UNHRC sessions after receiving the necessary accreditation.

Digital activities

Digital issues are increasingly gaining prominence in the work of UN Human Rights, the UNHRC, the Special Procedures, the UPR, and the Treaty Bodies.

A landmark document that provides a blueprint for digital human rights is the UNHRC resolution (A/HRC/20/8) on the promotion, protection, and enjoyment of human rights on the internet, which was first adopted in 2012, starting a string of regular resolutions with the same name addressing a growing number of issues. All resolutions affirm that the same rights that people have offline must also be protected online. Numerous other resolutions and reports from UN human rights entities and experts considered in this overview tackle an ever-growing range of other digital issues including the right to privacy in the digital age; freedom of expression and opinion; freedom of association and peaceful assembly; the rights of older persons; racial discrimination; the rights of women and girls; human rights in the context of violent extremism online; economic, social, and cultural rights; human rights and technical standard-setting; business and human rights; and the safety of journalists.

Digital policy issues

Artificial intelligence

In 2018, the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression presented a report to the UNGA on Artificial Intelligence (AI) Technologies and Implications for the Information Environment. Among other things, the document addresses the role of AI in the enjoyment of freedom of opinion and expression including ‘access to the rules of the game when it comes to AI-driven platforms and websites’ and therefore urges for a human rights-based approach to AI.

For her 2020 thematic report to the Human Rights Council, the UN Special Rapporteur on contemporary forms of racism, racial discrimination, xenophobia, and related intolerance analysed different forms of racial discrimination in the design and use of emerging technologies, including the structural and institutional dimensions of this discrimination. She followed up with reports examining how digital technologies, including AI-driven predictive models, deployed in the context of border enforcement and administration reproduce, reinforce, and compound racial discrimination.

In 2020, the Committee on the Elimination of Racial Discrimination published its General Recommendation No. 36 on preventing and combating racial profiling by law enforcement officials (CERD/C/GC/36), which focuses on algorithmic decision-making and AI in relation to racial profiling by law enforcement officials.

Child safety online (1)

The issue of child safety online has garnered the attention of UN human rights entities for some time. A 2016 resolution on Rights of the Child: Information and Communications Technologies and Child Sexual Exploitation adopted by the UNHRC calls on states to ensure ‘full, equal, inclusive, and safe access […] to information and communications technologies by all children and safeguard the protection of children online and offline’, as well as the legal protection of children from sexual abuse and exploitation online. The Special Rapporteur on the sale and sexual exploitation of children, including child prostitution, child pornography, and other child sexual abuse material, mandated by the UNHRC to analyse the root causes of sale and sexual exploitation and pro- mote measures to prevent it, also looks at issues related to child abuse, such as the sexual exploitation of children online, which has been addressed in a report (A/ HRC/43/40) published in 2020, but also in earlier reports.

The Committee on the Rights of the Child published its General Comment No. 25 on Children’s Rights in Relation to the Digital Environment (CRC/C/GC/25), which lays out how states parties should implement the convention in relation to the digital environment and provides guidance on relevant legislative, policy, and other measures to ensure full compliance with their obligations under the convention and optional protocols in the light of opportunities, risks, and challenges in promoting, respecting, protecting, and fulfilling all children’s rights in the digital environment.

Data governance

UN Human Rights maintains an online platform consisting of a number of databases on anti-discrimination and jurisprudence, as well as the Universal Human Rights Index (UHRI), which provides access to recommendations issued to countries by Treaty Bodies, Special Procedures, and the UPR of the UNHCR.

UN Human Rights also published a report titled A Human Rights-Based Approach to Data – Leaving no one Behind in the 2030 Agenda for Sustainable Development that specifically focuses on issues of data collection and disaggregation in the context of sustainable development.

UN Human Rights has worked closely with partners across the UN system in contributing to the Secretary-General’s 2020 Data Strategy, and co-leads, with the Office of Legal Affairs and UN Global Pulse, work on the subsequent Data Protection and Privacy Program.

Capacity development

UN Human Rights launched the Guiding Principles in Technology Project (B-Tech Project) to provide guidance and resources to companies operating in the technology space with regard to the implementation of the UN Guiding Principles on Business and Human Rights (UNGPs on BHR). Following the publication of a B-Tech scoping paper in 2019, several foundational papers have delved into a broad range of business-related issues, from business-model-related human rights risks to access to remedies. At the heart of the B-Tech project lies multistakeholder engagement, informing all of its outputs. The B-Tech project is enhancing its engagement in Africa, working with technology company operators, investors, and other key digital economy stakeholders, including civil society, across Africa in a set of African economies and their tech hubs to create awareness of implementing the UNGPs on BHR.

Following a multistakeholder consultation held on 7–8 March 2022, the High Commissioner presented her report on UN Guiding Principles on Business and Human Rights and Technology Companies (A/HRC/50/56), which demonstrated the value and practical application of the UNGPs in preventing and addressing adverse human rights impacts by technology companies.

Extreme poverty (2)

The Special Rapporteur on extreme poverty and human rights has in recent years increased his analysis of human rights issues arising in the context of increased digitisation and automation. His 2017 report to the General Assembly tackled the socio-economic challenges in an emerging world where automation and AI threaten traditional sources of income and analysed the promises and possible pitfalls of introducing a universal basic income. His General Assembly report in 2019 addressed worrying trends in connection with the digitisation of the welfare state. Moreover, in his 2022 report to the UNHRC on non-take-up of rights in the context of social protection, the Special Rapporteur highlighted, among other things, the benefits and considerable risks associated with automation of social protection processes.

Content policy

Geneva-based human rights organisations and mechanisms have consistently addressed content policy questions, in particular in the documents referred under Freedom of Expression and Freedom of Peaceful Assembly and of Association. Other contexts where content policy plays an important role include Rights of the Child, Gender Rights Online, and Rights of Persons with Disabilities. Moreover, the use of digital technologies in the context of terrorism and violent extremism is closely associated with content policy considerations.

UN Human Rights, at the request of the UNHRC, prepared a compilation report in 2016, which explores, among other issues, aspects related to the prevention and countering of violent extremism online, and underscores that responses to violent extremism that are robustly built on human rights are more effective and sustainable.

Additional efforts were made in 2019 when the Special Rapporteur on the promotion and protection of human rights and fundamental freedoms while countering terrorism published a report where she examined the multifaceted impacts of counter-terrorism measures on civic space and the rights of civil society actors and human rights defenders, including measures taken to address vaguely defined terrorist and violent extremist content. In July 2020, she published a report discussing the human rights implications of the use of biometric data to identify terrorists and recommended safeguards that should be taken.

Interdisciplinary approaches

Collaboration within the UN system

UN Human Rights is a member of the Secretary-General’s Reference Group and contributed to the development of his Strategy on New Technologies in 2018. The OHCHR was co-champion of the follow-up on two human-rights-related recommendations of the Secretary-General’s High-Level Panel on Digital Cooperation. The outcomes of this process were the basis of the Secretary-General’s Roadmap on Digital Cooperation, presented in June 2020.

As part of the implementation of the Secretary-General’s Call to Action for Human Rights, UN Human Rights launched the UN Hub for Human rights and Digital Technology, which provides a central repository of authoritative guidance from various UN human rights mechanisms on the application of human rights norms to the use and governance of digital technologies.

Moreover, as requested by the Secretary-General’s Roadmap to Digital Cooperation and the Secretary-General’s Call to Action for Human Rights, UN Human Rights is leading a UN system-wide process to develop a human rights due diligence guidance (HRDD) for digital technology. The HRDD guidance in development pertains to the application of human rights due diligence and human rights impact assessment related to the UN’s design, development, procurement, and use of digital technologies, and is expected to be completed by the end of 2022.

UN Human Rights participated in the UNESCO-led process to develop ethical standards for AI. With its aim to protect human rights and serve as an ethical guidance compass in the use of AI, UNESCO recommendation on the Ethics of AI was adopted by UNESCO member states at UNESCO’s General Conference in November 2021. As a strong contributor to the Inter-Agency Working Group on AI, UN Human Rights also provided feedback on the ethical principles of AI for the UN system.

In addition, UN Human Rights is a member of the Legal Identity Agenda Task Force, which promotes solutions for the implementation of SDG target 16.9 (i.e. by 2030, provide legal identity for all, including birth registration). It leads its work on exclusion and discrimination in the context of digitised identity systems.

Neurotechnology

Rapid advancements in neurotechnology and neuroscience, while holding promises of medical benefits and scientific breakthroughs, present a number of human rights and ethical challenges. Against this backdrop, UN Human Rights has been contributing significantly to an inter-agency process led by the Executive Office of the Secretary-General to develop a global roadmap for effective and inclusive governance of neurotechnology.

Secretary-General’s Report on Our Common Agenda

Since the adoption of A/RES/76/6 on Our Common Agenda in November 2021, the follow-up by the UN system has been underway. UN Human Rights is co-leading several proposals in collaboration with other entities, notably on the application of the human rights framework in the digital sphere, mitigation and prevention of internet shutdowns, and disinformation.

Privacy and data protection

Challenges to the right to privacy in the digital age, such as surveillance, communications interception, and the increased use of data-intensive technologies, are among some of the issues covered by the activities of UN Human Rights. At the request of the UNGA and the UNHRC, the High Commissioner prepared four reports on the right to privacy in the digital age. The first report, presented in 2014, addressed the threat to human rights caused by surveillance by governments, in particular mass surveillance. The ensuing report, published in September 2018, identified key principles, standards, and best practices regarding the promotion and protection of the right to privacy. It outlined minimum standards for data privacy legal frameworks. In September 2021, the High Commissioner presented a ground-breaking report on AI and the right to privacy (A/HRC/48/31), in which she called for a ban on AI applications that are incompatible with international human rights law, and stressed the urgent need for a moratorium on the sale and use of AI systems that pose serious human rights risks until adequate safeguards are put in place. In September 2022, the High Commissioner presented a report focusing on the abuse of spyware by public authorities, the key role of encryption in ensuring the enjoyment of human rights in the digital age, and the widespread monitoring of public spaces.

The UNHRC also tackles online privacy and data protection. Resolutions on the promotion and protection of human rights on the internet have underlined the need to address security concerns on the internet in accordance with international human rights obligations to ensure the protection of all human rights online, including the right to privacy. The UNHRC has also adopted specific resolutions on the right to privacy in the digital age, addressing issues such as mass surveillance, AI, the responsibility of business enterprises, and the key role of the right to privacy as an enabler of other human rights. Resolutions on the safety of journalists have emphasised the importance of encryption and anonymity tools for journalists to freely exercise their work. Two resolutions on new and emerging technologies (2019 and 2021) have further broadened the lens, for example by asking for a report on the human rights implications of technical standard-setting processes.

The UNHRC has also mandated the Special Rapporteur on the right to privacy to address the issue of online privacy in its Resolution on the Right to Privacy in the Digital Age from 2015 (A/HRC/RES/28/16). To illustrate, the Special Rapporteur has addressed the question of privacy from the stance of surveillance in the digital age (A/HRC/34/60), which becomes particularly challenging in the context of cross-border data flows. More recently, specific attention has been given to the privacy of health data that is being produced more and more in the day and age of digitalisation, and that requires the highest legal and ethical standards (A/HRC/40/63). In this vein, in 2020, the Special Rapporteur examined data protection and surveillance in relation to COVID-19 and contact tracing in his preliminary report (A/75/147), in which he provided a more definitive analysis of how pandemics can be managed with respect to the right to privacy (A/76/220) in 2021. In another 2020 report (A/HRC/43/52), the Special Rapporteur provides a set of recommendations on privacy in the online space calling for, among other things, ‘comprehensive protection for secure digital communications, including by promoting strong encryption and anonymity- enhancing tools, products, and services, and resisting requests for “backdoors” to digital communications’ and recommending that ‘government digital identity programs are not used to monitor and enforce societal gender norms, or for purposes that are not lawful, necessary, and proportionate in a democratic society.’

The Special Rapporteur also addressed the challenges of AI and privacy, as well as children’s privacy, particularly the role of privacy in supporting autonomy and positive participation of children in society, in his report in 2021 (A/HRC/46/37).

Lastly, in 2022, the Special Rapporteur examined developments in privacy and data protection in Ibero- America in her report titled Privacy and Personal Data Protection in Ibero-America: A Step Towards Globalization? (A/HRC/49/55).

Freedom of expression

The High Commissioner and her office advocate for the promotion and protection of freedom of expression, including in the online space. Key topics in this advocacy are the protection of the civic space and the safety of journalists online; various forms of information control, including internet shutdowns and censorship; addressing incitement to violence, discrimination, or hostility; disinformation; and the role of social media platforms in the space of online expression.

Freedom of expression in the digital space also features highly on the agenda of the UNHRC. It has often been underlined that states have a responsibility to ensure adequate protection of freedom of expression online, including when they adopt and implement measures aimed at dealing with issues such as cybersecurity, incitement to violence, and the promotion and distribution of extremist content online. The UNHRC has also been firm in condemning measures to intentionally prevent or disrupt access to or the dissemination of information online, and has called on states to refrain from and cease such measures.

In 2021, at the request of the UNHRC A/HRC/47/22, the High Commissioner prepared a report on internet shutdowns (A/HRC/50/55), which looks at trends in internet shutdowns, analysing their causes, their legal implications, and their impact on a range of human rights, including economic, social, and cultural rights. She called on states to refrain from the full range of internet shutdowns and for companies to uphold their responsibilities to respect human rights. She stressed the need for development agencies, and regional and international organisations to bridge their digital connectivity efforts with efforts related to internet shutdowns.

UN Human Rights also weighs in on a range of law-making processes that are relevant to the exercise of the right to freedom of expression. For example, it has engaged with the development of the EU Digital Services Act, commented extensively on global trends in regulating social media, and participated in the process of elaborating a Comprehensive International Convention on Countering the Use of Information and Communications Technologies for Criminal Purposes.

Special Rapporteurs on the promotion and protection of the right to freedom of opinion and expression have been analysing issues relating to free expression in the digital space for more than a decade. Reports in the first half of the 2010s already addressed the importance of universal access to the internet for the enjoyment of human rights, free expression in the context of elections, and the adverse impacts of government surveillance on free expression. In 2018, the Special Rapporteur published a report on online content regulation. It tackles governments’ regulation of user-generated online content, analyses the role of companies, and recommends that states should ensure an enabling environment for online freedom of expression and that businesses should rely on human rights law when designing their products and services. The same year, he also presented to the UNGA a report addressing freedom of expression issues linked to the use of AI by companies and states. A year later, the Special Rapporteur presented a report to the UNGA on online hate speech that discusses the regulation of hate speech in international human rights law and how it provides a basis for governmental actors considering regulatory options and for companies determining how to respect human rights online.

In 2020, the Special Rapporteur issued Disease Pandemics and the Freedom of Opinion and Expression, a report that specifically tackles issues such as access to the internet, which is highlighted to be ‘a critical element of healthcare policy and practice,  public information, and even the right to life’. The report calls for greater international coordination on digital connectivity given the importance of digital access to healthcare information. Other reports addressed the vital importance of encryption and anonymity for the exercise of freedom of opinion and the threats to freedom of expression emanating from widespread digital surveillance.

The Special Rapporteur, while acknowledging the complexities and challenges posed by disinformation in the digital age, noted that responses by states and companies to counter disinformation have been inadequate and detrimental to human rights. In her 2021 report Disinformation and Freedom of Opinion and Expression (A/HRC/47/25), she examined the threats posed by disinformation to human rights, democratic institutions, and development processes, and called for multidimensional and multistakeholder responses to disinformation that are well grounded in the international human rights framework and urged companies to review their business models and states to recalibrate their responses to disinformation.

More recently, in 2022, the Special Rapporteur issued Reinforcing Media Freedom and the Safety of Journalists in the Digital Age (A/HRC/50/29), a report in which she calls on states and the international community to strengthen multistakeholder cooperation to protect and promote media freedom and the safety of journalists in the digital age, and ensure independence, pluralism, and viability of the media. She also calls on digital services companies and social media platforms to respect the UNGPs on BHR.

Online hate speech and discrimination have also been addressed by the Special Rapporteur on freedom of religion and belief. For instance, in a report published in 2019, the online manifestation of antisemitism (including antisemitic hate speech) was underscored, and best practices from the Netherlands and Poland were shared. The report highlights that governments ‘have an affirmative responsibility to address online antisemitism, as the digital sphere is now the primary public forum and marketplace for ideas’. In another document published that same year, the Special Rapporteur assesses the impact of online platforms on discrimination and on the perpetuation of hostile and violent acts in the name of religion, as well as how restrictive measures such as blocking and filtering of websites negatively impact the freedom of expression.

The issue of online blasphemy and undue limitations on expressing critical views of religions and beliefs imposed by governments has also been addressed on a number of occasions, including in a report from 2018.

Gender rights online (3)

UN Human Rights and the UNHRC have reiterated on several occasions the need for countries to bridge the gender digital divide and enhance the use of ICTs, including the internet, to promote the empowerment of all women and girls. It has also condemned gender-based violence committed on the internet. Implementing a 2016 UNHRC resolution on the Promotion, Protection, and Enjoyment of Human Rights on the Internet, the High Commissioner on Human Rights in 2017 prepared a report on Ways to Bridge the Gender Digital Divide from a Human Rights Perspective.

Rights of persons with disabilities

The promotion and protection of the rights of persons with disabilities in the online space have been addressed on several occasions by the UN Special Rapporteur on the rights of persons with disabilities. A report from 2016 underscored that ICTs including the internet can increase the participation of persons with disabilities in public decision-making processes and that states should work towards reducing the access gap between those who can use ICTs and those who cannot.

Nevertheless, a report from 2019 stressed that the shift to e-governance and service delivery in a digital manner can hamper access for older persons with disabilities who may lack the necessary skills or equipment.

The Special Rapporteur also examined the opportunities and risks posed by AI, including discriminatory impacts in relation to AI in decision-making systems. In his 2021 report (A/HRC/49/52), the Special Rapporteur emphasises the importance of disability-inclusive AI and the inclusion of persons with disabilities in conversations about AI.

Freedom of peaceful assembly and association

The exercise of the rights to freedom of peaceful assembly and association in the digital environment in recent years has attracted increased attention. For example, the High Commissioner presented to the 44th session of the UNHRC a report on new technologies such as ICTs and their impact on the promotion and protection of human rights in the context of assemblies, including peaceful protests. The report highlighted many of the great opportunities for the exercise of human rights that digital technologies offer, analysed key issues linked to online content takedowns, and called on states to stop the practice of network disruptions in the context of protests. It also developed guidance concerning the use of surveillance tools, in particular facial recognition technology.

The Human Rights Committee published in July 2020 its General Comment No. 37 on Article 21 of the International Covenant on Civil and Political Rights (ICCPR) (right of peaceful assembly), which addresses manifold aspects arising in the digital context.

The Special Rapporteur on the rights to freedom of peaceful assembly and of association in 2019 published a report for the UNHRC focusing on the opportunities and challenges facing the rights to freedom of peaceful assembly and of association in the digital age. In following reports, he condemned the widespread practice of internet shutdowns and raised concerns about technologically mediated restrictions on free association and assembly in the context of crises.

Economic, social, and cultural rights

In March 2020, the UN Secretary-General presented to the UNHRC a report on the role of new technologies for the realisation of economic, social, and cultural rights. He identified the opportunities and challenges held by new technologies for the realisation of economic, social, and cultural rights and other related human rights, and for the human-rights-based implementation of the 2030 Agenda for Sustainable Development. The report concludes with recommendations for related action by member states, private companies, and other stakeholders.

More recently, in 2022, the Special Rapporteur on Education presented a report on the impact of digitalisation of education on the right to education (A/HRC/50/32) to the UNHRC, calling for the integration of human rights legal framework in digital education plans in the context of increasing digitalization of education.

Digital tools

Technical standard-settings and human rights

The UNHRC adopted resolution A/HRC/RES/47/23 on new and emerging digital technologies and human rights, which requested UN Human Rights to convene an expert consultation and write a report discussing the relationship between human rights and technical standard-setting processes for new and emerging digital technologies. The expert consultation and the report will be presented in 2023 at the UNHRC.

As requested by the UNHRC, in its resolution A/HRC/ RES/47/23, the High Commissioner presented her report on UN Guiding Principles on Business and Human Rights and Technology Companies (A/HRC/50/56), following the multistakeholder consultation held on 7–8 March 2022. The High Commissioner’s report demonstrated the value and practical application of the UNGPs in preventing and addressing adverse human rights impacts by technology companies

The UNHRC has developed an e-learning tool to assist government officials from least-developed countries and small island developing states (SIDS) as per the mandate of the Trust Fund to develop competencies on the UNHRC and its mechanisms.

Future of meetings

For more information, visit the UN Human Rights meetings and events page.

Social media channels

Facebook @UnitedNationsHumanRights

Instagram @unitednationshumanrights

Twitter @UNHumanRights

YouTube @UNOHCHR

1-Within the work of the OHCHR, ‘child safety online’ is referred to as ‘rights of the child’ and dealt with as a human rights issue.

2-Within the work of the OHCHR, ‘extreme poverty’ is dealt with as a human rights issue.

3-Within the work of the OHCHR, ‘gender rights women rights and gender equality online’

International Organization for Standardization

Acronym: ISO

Established: 1947

Address: Chemin de Blandonnet 8, 1214 Vernier, Geneva, Switzerland

Website: https://www.iso.org/iso/home.html

Stakeholder group: International and regional organisations

ISO is an international non-governmental organisation (NGO) composed of 165 national standard-setting bodies that are either part of governmental institutions or mandated by their respective governments. Each national standard-setting body therefore represents a member state. After receiving a request from a consumer group or an industry association, ISO convenes an expert group tasked with creating a particular standard through a consensus process. ISO develops international standards across a wide range of industries, including technology, food, and healthcare, to ensure that products and services are safe, reliable, of good quality, and ultimately, facilitate international trade. As such, it acts between the public and the private sector. To date, ISO has published more than 22,000 standards.

Digital activities

A large number of the international standards and related documents developed by ISO are related to information and communications technologies (ICTs), such as the Open Systems Interconnection (OSI) created in 1983; it established a universal reference model for communication protocols. The organisation is also active in the field of emerging technologies including blockchain, the internet of things (IoT), and artificial intelligence (AI).

The standards are developed by various technical committees dedicated to specific areas including information security, cybersecurity, privacy protection, AI, and intelligent transport systems. ISO contributes to all of the sustainable development goals (SDGs). Here you can see the number of ISO standards that apply to each SDG.

Digital policy issues

Artificial intelligence

The joint technical committee of ISO and the International Electrotechnical Commission (IEC) for AI is known as ISO/ IEC JTC1/SC 42 and is responsible for the development of standards in this area. To date, it has published one standard specifically pertaining to AI with 18 others in development.

ISO/IEC TR 24028 provides an overview of trustworthiness in AI systems, detailing the associated threats and risks and addresses approaches on availability, resiliency, reliability, accuracy, safety, security, and privacy. The standards under development include those that cover concepts and terminology for AI (ISO/IEC 22989), bias in AI systems and AI-aided decision-making (ISO/IEC TR 24027), AI risk management (ISO/IEC 23894), a framework for AI systems using machine learning (ML) (ISO/IEC 23053), and the assessment of ML classification performance (ISO/IEC TS 4213).

Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.

Cloud computing

ISO and the International Electrotechnical Commission (IEC) also have a joint committee for standards related to cloud computing, which currently has 19 published standards and a further 7 in development.

Of those published, two standards of note include ISO/ IEC 19086-1, which provides an overview, foundational concepts, and definitions for a cloud computing service level agreement framework, and ISO/IEC 17789, which specifies the cloud computing reference architecture.

Standards under development include those on health informatics (ISO/TR 21332.2); the audit of cloud services (ISO/IEC 22123-2.2); and data flow, categories, and use (ISO/IEC 19 944 -1). Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.

Internet of things

Recognising the ongoing developments in the field of IoT, ISO has a number of dedicated standards both published and in development, including those for intelligent transport systems (ISO 19079), future networks for IoT (ISO/IEC TR 29181-9), unique identification for IoT (ISO/ IEC 29161), Internet of Media Things (ISO/IEC 23093-3), trust-worthiness of IoT (IS O/IEC 30149), and industrial IoT systems (ISO/IEC 30162). IoT security is addressed in standards such as ISO/IEC 27001 and ISO/IEC 27002, which provide a common language for governance, risk, and compliance issues related to information security.

In addition, there are seven standards under development, some of which provide a methodology for the trustworthiness of an IoT system or service (ISO/IEC 30147), a trustworthiness framework (ISO/IEC 30149), the requirements of an IoT data exchange platform for various IoT services (ISO/IEC 30161), and a real-time IoT framework (ISO/IEC 30165). Up-to-date information on the ISO and IEC joint technical committee for IoT (e.g. scope, programme of work, contact details) can be found on the committee page.

Telecommunication infrastructure

ISO’s standardisation work in the field of telecommunications infrastructure covers areas such as planning and installation of networks (e.g. ISO/IEC 14763-2 and ISO/IEC TR 14763-2-1), corporate telecommunication networks (e.g. ISO/IEC 17343), local and metropolitan area networks (e.g. ISO/IEC/IEEE 8802-A), private integrated telecommunications networks (e.g.   ISO/ IEC TR 14475), and wireless networks. Next-generation networks – packet-based public networks able to provide telecommunications services and make use of multiple quality of service enabled transport technology – are equally covered (e.g. ISO/IEC TR 26905).

ISO also has standards for the so-called future networks, which are intended to provide futuristic capabilities and services beyond the limitations of current networks, including the internet.

Up-to-date information on the joint ISO and IEC technical committee that develops these standards (e.g. scope, programme of work, contact details) can be found on the committee page.

Blockchain

ISO has published three standards on blockchain and distributed ledger technologies: ISO/TR 23455 gives an overview of smart contracts in blockchain and distributed ledger technologies, ISO/TR 23244 tackles privacy and personally identifiable information protection, and ISO 22739 covers fundamental blockchain terminology respectively.

ISO also has a further ten standards on blockchain in development. These include those related to security risks, threats, and vulnerabilities (ISO/TR 23245.2); security management of digital asset custodians (ISO/TR 23576); taxonomy and ontology (ISO/TS 23258); legally- binding smart contracts (ISO/TS 23259); and guidelines for governance (ISO/TS 23635).

Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.

Emerging technologies

ISO develops standards in the area of emerging technologies. Perhaps the largest number of standards in this area are those related to robotics. ISO has more than 40 different standards either published or in development that cover issues such as collaborative robots (e.g. ISO/TS 15066), safety requirements for industrial robots (e.g. ISO 10218-2), and personal care robots (e.g. ISO 13482).

Autonomous or so-called intelligent transport systems (ITS) standards are developed by ISO’s ITS Technical Committee and include those for forward vehicle collision warning systems (ISO 15623) and secure connections between trusted devices (ISO/TS 21185).

Standards are also being developed to address the use of virtual reality in learning, education, and training (e.g. ISO/ IEC 23843) and the display device interface for augmented reality (ISO/IEC 23763).

Encryption

As more and more information (including sensitive personal data) is stored, transmitted, and processed online, the security, integrity, and confidentiality of such information become increasingly important. To this end, ISO has a number of standards for the encryption of data. For example, ISO/IEC 18033-1, currently under development, addresses the nature of encryption and describes certain general aspects of its use and properties. Other standards include ISO/IEC 19772, which covers authenticated encryption; ISO/IEC 18033-3, which specifies encryption systems (ciphers) for the purpose of data confidentiality; and ISO 19092, which allows for the encryption of biometric data used for authentication of individuals in financial services for confidentiality or other reasons.

ISO also has standards that focus on identity-based ciphers, symmetric and asymmetric encryption, public key infrastructure, and many more related areas.

Data governance

Big data is another area of ISO standardisation, and around 80% of related standards are developed by the ISO/IEC AI committee. The terminology for big-data-related standards is outlined in ISO/IEC 20546, while ISO/ IEC 20547-3 covers big data reference architecture. ISO/IEC TR 20547-2 provides examples of big data use cases with application domains and technical considerations. ISO/IEC TR 20547-5 details a roadmap of existing and future standards in this area. A further eight standards are in development and include those for big data security and privacy (ISO/IEC 27045), terminology used in big data within the scope of predictive analytics (ISO 3534-5), and data science life cycle (ISO/TR 23347).

Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.

Digital identities

Digital signatures that validate digital identities help to ensure the integrity of data and the authenticity of particulars in online transactions. This, therefore, contributes to the security of online applications and services. Standards to support this technology cover elements such as anonymous digital signatures (e.g. ISO/IEC 20008-1 and ISO/IEC 20008-2); digital signatures for healthcare documents (e.g. ISO 17090-4 and ISO 17090-5); and blind digital signatures, which is where the content of the message to be signed is disguised, used in contexts where, for example, anonymity is required. Examples of such standards are ISO 18370-1 and ISO/IEC 18370-2.

Privacy and data protection

Privacy and data protection in the context of ICTs is another area covered by ISO’s standardisation activities. One example is ISO/IEC 29101, which describes a privacy architecture framework. Others include those for privacy-enhancing protocols and services for identification cards (ISO/IEC 19286); privacy protection requirements pertaining to learning, education, and training systems employing information technologies (ISO/IEC 29187-1); privacy aspects in the context of intelligent transport systems (ISO/TR 12859); and security and privacy requirements for health informatics (ISO/TS 14441).

ISO has developed an online browsing platform that provides up-to-date information on ISO standards, graphical symbols, publications, and terms and definitions.

Future of meetings

ISO’s meetings take place face-to-face, hybrid, or virtually. This is reflected in the ISO meeting calendar. ISO’s governance groups are also meeting face-to-face, hybrid, or virtually.

Social media channels

Facebook @isostandards

Instagram @iisostandards

LinkedIn @isostandards

Twitter @isostandards

YouTube @iso

International Labour Organization

Acronym: ILO

Established: 1919

Address: 4 route des Morillons, 1211 Geneva 22, Switzerland

Website: https://www.ilo.org/

Stakeholder group: International and regional organisations

The International Labour Organization (ILO) was established in 1919 and is therefore the first and oldest specialised agency of the UN. It is the only UN agency that has a tripartite structure consisting of government representatives, employers, and workers, and aims to promote labour rights, including the right to decent work. The ILO also works towards better dialogue on work-related issues and supports adequate employment opportunities.

It maintains over 20 economic sectors that are focused on industries such as health services, oil and gas production, and textiles. As part of its work, the ILO addresses many different topics including child labour, green jobs, and workplace health and safety.

Digital activities

Digital issues are present in a number of areas of the ILO’s work. One of these areas is the postal and telecommunication services sector that encompasses activities related to the Internet, in which  the ILO works on assisting governments, employers, and workers to develop policies and programmes aimed at enhancing economic opportunities and improving working conditions. It pays particular attention to major trends in this sector such as deregulation, and privatisation and how they affect the labour force. More recently, the organisation has started addressing digitalisation through topics such as skills knowledge, employability, and the future of work.

Digital policy issues

Future of work 

Perhaps the most visible digital issue in the ILO’s activities is the future of work. To address it, the ILO established the ILO Global Commission on the Future of Work as part of its Future of Work Initiative. The Commission is composed of government, civil society, academia, and business association representatives. In 2019, the Commission published a landmark report titled ‘Work for a Brighter Future’ that calls for a human-centered agenda for the future of work and explores the impacts of technological progress in the fields of artificial intelligence (AI) and robotics and on issues such as the gender labour gap and the automation of work. That same year, the ILO issued the ILO Centenary Declaration that, among other things, calls for ‘full and productive employment and decent work’ in the context of the digital transformation of work, including platform work.

The ILO has published several other research documents and reports on the subject including ‘Digital labour platforms and the future of work: Towards decent work in the online world’ that tackles working conditions on digital platforms and ‘Global employment trends for youth in 2020: Technology and the future of jobs’ that covers inequalities in youth labour markets arising from digital transformation, as well as investment in young people’s skills and many other underlying questions.

Through the non-standard forms of employment topic, the ILO also addresses crowdwork and the gig economy, as well as working from home (e.g. teleworking).

Privacy and data protection 

In regard to privacy and data protection, the ILO has published a set of principles on protection of workers’ personal data that tackles digital data collection and the security and storage of personal data.

Sustainable development 

The ILO, in line with the 2030 Agenda and more specifically sustainable development goal 8 (‘Decent Work and Economic Growth’) has created the DW4SD Resource Platform that maps out the interplay between sustainable development and decent work. The platform provides guidance and working resources to ILO staff, development partners, UN country teams, and other stakeholders.

Capacity development 

Capacity development is another digital-related issue addressed by the ILO. As part of its skills, knowledge, and employability initiatives, the ILO together with the Norwegian Ministry of Foreign Affairs has developed the ‘SKILL-UP programme’ that aims to assist developing countries to build capacity and improve their skills systems in relation to digitalisation and technological innovation. Aside from providing training to help empower women with digital skills, the programme also develops digital tools such as skill trackers where surveys covering different aspects of skills development are collected in real-time.

The iiO also has a Help Desk for Business on International Labour Standards that provides assistance to businesses on how to align their business operations with labour standards.

Data governance 

The ILO has a world employment and social outlook platform that provides datasets on measures such as the global labour force, unemployment, and employment by sector. The organisation also has a development co-operation dashboard with data on labour-related policy areas.

Digital tools

The International Training Centre, established by the ILO, provides online courses on a variety of labour issues. The ILO also organises webinars and uses a number of social media accounts.

Future of meetings

Any reference to online or remote meetings?

Any reference to holding meetings outside HQ?

Any reference to deliberation or decision making online?

International Committee of the Red Cross

Acronym: ICRC

Established: 1863

Address: 19 Avenue de la paix, 1202 Geneva, Switzerland

Website: https://www.icrc.org

Stakeholder group: International and regional organisations

Established in 1863, the ICRC is an independent international humanitarian organisation headquartered in Geneva. It defends and promotes the respect of international humanitarian law (IHL) and is dedicated to protecting the lives and dignity of victims of war and to providing assistance. Along these lines, it cooperates with governments, the private sector, and other entities affected by international and internal armed conflict and violence.

Together with the International Federation of Red Cross and Red Crescent Societies and 192 individual national societies, the ICRC makes up the so-called International Red Cross and Red Crescent Movement.

Digital activities

Digitalisation is increasingly present in the context of armed conflict and violence. On one hand, affected populations are in demand for digital tools, which humanitarian organisations need to provide in a responsible manner.

On the other hand, states use cyber operations as part of warfare with humans affected by the consequences of such operations and other digital risks.

To this end, humanitarian organisations also use digital tools to improve their operations. The ICRC addresses the implications of technology, which are multifold and range from data protection for humanitarian actions to the application of IHL to cyber operations in armed conflict.

It hosts expert and intergovernmental discussions and has developed a number of (digital) tools to help improve awareness and understanding of IHL and relevant standards.

The ICRC co-operates with other organisations on digital policy issues.

Digital policy issues

Artificial intelligence

The ICRC has explored the role of artificial intelligence (AI) tools in armed conflict. In a document titled Artificial Intelligence and Machine Learning in Armed Conflict: A Human-Centred Approach published in 2019, it argues that ‘any new technology of warfare must be used, and must be capable of being used, in compliance with existing rules of international humanitarian law.’ It also touches on the use of AI and machine learning (ML) technologies capable of controlling physical military hardware. It argues that from a humanitarian perspective, autonomous weapon systems (AWS) are of particular concern given that humans may not be able to exert control over such weapons or the resulting use of force. While the ICRC recognises that not all weapon systems incorporate AI or ML, it emphasises that such software components could eventually give way to future AWS. It also emphasises the potential misuse of AI and ML in the development of cyber weapons and capabilities. The ICRC calls for a human control-based approach to the application of AI and ML in AWS.

The question of AI has been further explored in other reports such as its Autonomy, Artificial Intelligence, Robotics: Technical Aspects of Human Control.

Cyber operations during armed conflict

The use of cyber operations during armed conflicts is a reality today and their use is likely to increase in future. Through bilateral confidential dialogue, expert discussions, participation in intergovernmental processes, and constant monitoring and analysis, the ICRC is raising awareness of the potential human cost of cyber operations and the application of IHL to cyber operations during armed conflict. Its efforts on this matter date back over two decades. Ever since, the ICRC has held the view that IHL limits cyber operations during armed conflict just as it limits the use of any other weapon, means and methods of warfare in an armed conflict, whether new or old.

Over the years, the ICRC has been actively involved in global policy discussions on cyber-related issues, including those held within the UN (various Groups of Governmental Experts (GGEs) and the Open-Ended Working Groups (OEWGs)). In addition, it convenes regional consultations among government experts on how IHL applies to cyber operations, and global expert meetings, such as the potential human cost of cyber operations and on avoiding civilian harm from military cyber operations during armed conflicts. Its legal views on how IHL applies to cyber operations during armed conflict are found in a 2019 position paper that was sent to all UN member states in the context of the different UN- mandated processes on information and communications technology (ICT) security. Finally, the ICRC explores innovative solutions, such as a digital emblem, to protect medical and humanitarian missions in cyberspace. The ICRC’s Law and Policy blog provides a large number of short pieces on cyber operations, featuring tech expert, legal, and policy perspectives.

Privacy and data protection (1)

The ICRC plays an active role in regard to privacy and data protection in the context of humanitarian action. It has a data protection framework compliant with international data protection standards that aims to protect individuals from a humanitarian standpoint. The framework consists of ICRC rules on personal data protection, which were revised in 2020 in response to the rapid development of digital technologies, while supervisory and control mechanisms are overseen by an independent data protection commission and a data protection officer. In 2019, the ICRC spearheaded the adoption of a resolution on Restoring Family Links While Respecting Privacy, Including as it Relates to Personal Data Protection at the International Conference of the Red Cross and Red Crescent. In 2022, it pushed for the adoption of a resolution on Safeguarding Humanitarian Data at the Council of Delegates of the Red Cross and Red Crescent Movement.

Despite the wide range of data sources employed and dealt with by the ICRC, specific attention is dedicated to biometric data, which is often used in forensics and the restoration of family links. To manage this highly sensitive

information and to ensure the responsible deployment of new technologies (including new biometric identification techniques), the ICRC has adopted a Biometrics Policy, which sets out the roles and responsibilities of the ICRC and defines the legitimate bases and specified purposes for the processing of biometric data.

Data protection is also addressed by the ICRC Handbook on Data Protection in Humanitarian Action. The Handbook provides suggestions as to how existing data protection principles apply to humanitarian organisations and builds on existing regulations, working procedures, and practices. The second edition of the document specifically provides guidance on the technical aspects of data protection by design and by default and covers technological security measures. In addition, through dedicated chapters, it addresses the potential and risks of digital technology such as blockchain, AI, digital identity, and connectivity for data protection in humanitarian action. The ICRC hosted a digital launch event for the second edition of the handbook as well as one event focusing on data protection and COVID-19. It then followed up with the DigitHarium, a one-year outreach initiative to socialise some of the themes linked to data protection in the humanitarian sector as well as to provide a space where humanitarian, diplomatic, academic, and technology practitioners can meet to collaborate to find local and global solutions to today’s digital dilemmas.

The ICRC further explored the issue of data and privacy in a joint report that it published with Privacy International titled  The  Humanitarian  Metadata  Problem:  Doing no Harm in the Digital Era. The report looks into how different types of metadata are derived from internal and external humanitarian exchanges (i.e. exchanges between humanitarian organisations and individuals affected by armed conflict and violence or communication within humanitarian organisations) through telecommunications and messaging; cash transfer programmes; and how social media can be accessed and misused for profiling of individuals, surveillance, repression, or commercial exploitation. In line with the humanitarian ‘do no harm’ principle, the report underscores that the humanitarian community has to consider that there is a risk that it can hinder the safety and the rights of those needing protection when using digital technologies. The ICRC also hosted an event on this topic in London in December 2018, the Digital Risk Symposium. The event explored what organisations can do to ensure they do not create additional vulnerabilities for people already at risk, as well as the potential for collaboration in the sector.

More recently, the ICRC has been involved in the Road to Bern via Geneva dialogues. As part of its contribution, the ICRC collaborated with the World Intellectual Property Organization in the second dialogue dedicated to data collection entitled Protecting Data Against Vulnerabilities: Questions of Trust Security and Privacy of Data. Specific attention was paid to three challenges: data anonymisation, loss of data through cloud processing, and limited use of biometric data.

Digital tools

The ICRC has argued in favour of the digitalisation of the Geneva Conventions and on the occasion of the 70th anniversary of these very treaties and additional protocols, released an IHL digital app. The app provides access to over 75 treaties including the Geneva Conventions and allows users to read through the content and therefore familiarise themselves with the text. The ICRC has a number of databases on IHL including its customary IHL database and the ICRC national implementation database.

Online learning is also used by the ICRC to promote the implementation of IHL. In 2019, it launched an e-learning course entitled Introduction to International Humanitarian Law aimed at non-legal practitioners, policymakers, and other professionals who are interested in the basics of IHL. Other online courses are available through the ICRC training centre as well as e-briefings which are available in its e-briefing library.

The ICRC maintains a digital library and an app with all ICRC publications in English and French.

Research and development

In 2022, the ICRC opened a Delegation for Cyberspace in Luxembourg, which serves as a safe and secure space to do due diligence research and develop and test solutions and ideas to prepare the ground for the support, protection, and deployment of digital services to affected people on a global scale. It will also further explore what it means to be a digital stakeholder in a manner compatible with its mandate; operational modalities; and principles of neutrality, independence, and impartiality.

Social media channels

Facebook @ICRC

Instagram @ICRC

LinkedIn @ICRC

TikTok @ICRC

Twitter @ICRC

YouTube @ICRC

1- The ICRC deals with privacy and data protection within its mandate and context of IHL. In this Atlas, following the Digital Watch Observatory taxonomy, privacy and data protection are part of the human rights basket.

United Nations Conference on Trade and Development

Acronym: UNCTAD

Established: 1964

Address: Palais des Nations, Av. de la Paix 8-14, 1211 Geneva 10, Switzerland

Website: https://unctad.org/

Stakeholder group: International and regional organisations

The United Nations Conference on Trade and Development (UNCTAD) is a UN body dedicated to supporting developing countries in accessing the benefits of a globalised economy more fairly and effectively. It provides analysis, facilitates consensus-building, and offers technical assistance, thus helping countries use trade, investment, finance, and technology to support inclusive and sustainable development.

UNCTAD also works to facilitate and measure progress towards achieving the sustainable development goals (SDGs), through a wide range of activities in areas such as technology and innovation, trade, investment, environment, transport and logistics, and the digital economy.

UNCTAD’s work often results in analyses and recommendations that can inform national and international policy-making processes, and contribute to promoting economic policies aimed at ending global economic inequalities and generating human-centric sustainable development.

Digital Activities

UNCTAD is particularly active in the field of e-commerce, trade, and the digital economy, carrying out a wide range of activities from research and analysis to providing assistance to member states in developing adequate legislative frameworks and facilitating international dialogue on the development opportunities and challenges associated with the digital economy. UNCTAD also works to facilitate and measure progress towards achieving the SDGs, in particular through (but not limited to) its activities in the field of science, technology, and innovation (STI) for development. Consumer protection, gender equality, and privacy and data protection are other digital policy areas where UNCTAD is active.

Digital policy issues

E-commerce and trade 

UNCTAD’s work programme on e-commerce and the digital economy (ECDE Programme), encompasses several research and analysis, consensus building and technical assistance activities, as follows:

Research and analysis

UNCTAD conducts research and analysis on e-commerce and the digital economy and their implications for trade and development. These are mainly presented in its flagship publication, the Digital Economy Report (known as Information Economy Report until 2017), and in its Technical Notes on ICT for Development.

Consensus building on e-commerce and digital economy policies

UNCTAD’s Intergovernmental Group of Experts on E-commerce and the Digital Economy meets regularly to discuss ways to strengthen the development dimension of e-commerce and the digital economy. The group’s meetings are usually held in conjunction with the eCommerce Week, an annual event hosted by UNCTAD and featuring discussions on development opportunities and challenges associated with the digital economy.

E-Commerce assessments and strategy formulation

The eTrade Readiness Assessments (eT Readies) assist least developed countries (LDCs) and other developing countries in understanding their e-commerce readiness in key policy areas in order to better engage in and benefit from e-commerce. The assessments provide recommendations to overcome identified barriers and bottlenecks to growth and enjoying the benefits of digital trade.

UNCTAD’s work on information and communication technology (ICT) policy reviews and national e-commerce strategies involves technical assistance, advisory services, diagnostics, and strategy development on e-commerce, and national ICT planning at the request of governments. Through an analysis of the infrastructural, policy, regulatory, institutional, operational, and socioeconomic landscape, the reviews help governments to overcome weaknesses and bureaucratic barriers, leverage strengths and opportunities, and put in place relevant strategies.

Legal frameworks for e-commerce

UNCTAD’s E-commerce and Law Reform work helps to develop an understanding of the legal issues underpinning e-commerce through a series of capacity-building workshops for policymakers at the national and regional levels. Concrete actions include: Assistance in establishing domestic and regional legal regimes to enhance trust in online transactions, regional studies on cyber laws harmonisation, and the global mapping of e-commerce legislation through its ‘Global Cyberlaw Tracker’.

Measuring the information economy

UNCTAD’s work on measuring the information economy includes statistical data collection and the development of methodology, as well as linking statistics and policy through the Working Group on Measuring E-commerce and the Digital Economy, established by the Intergovernmental Group of Experts on E-Commerce and the Digital Economy. Figures are published in the biennial Digital Economy Report and the statistics portal UNCTADstat. Technical co-operation here aims to strengthen the capacity of national statistical systems to produce better, more reliable, and internationally comparable statistics on the following issues: ICT use by enterprises, size and composition of the ICT sector, and e-commerce and international trade in ICT-enabled services. UNCTAD also produces the B2C E-commerce Index which measures an economy’s preparedness to support online shopping.

Smart Partnerships through eTrade for all

The eTrade for all initiative (eT4a) is a global collaborative effort of 32 partners to scale up co-operation, transparency, and aid efficiency towards more inclusive e-commerce. Its main tool is an online platform (etradeforall.org), a knowledge-sharing and information hub that facilitates access to a wide range of information and resources on e-commerce and the digital economy. It offers a gateway for matching the suppliers of technical assistance with those in need. Beneficiaries can connect with potential partners, learn about trends, best practices, up-to-date e-commerce indicators, and upcoming events all in one place. The initiative also acts as catalyst of partnership among its members for increased synergies. This collaboration has concretely translated into the participation of several eT4a partners as key contributors to the various eCommerce Weeks organised by UNCTAD and in the conduct and review of eTrade Readiness Assessments.

Consumer protection 

Through its Competition and Consumer Policies Programme, UNCTAD works to assist countries in improving their competition and consumer protection policies. It provides a forum for intergovernmental deliberations on these issues, undertakes research, policy analysis and data collection, and provides technical assistance to developing countries. The Intergovernmental Group of Experts on Consumer Protection Law and Policy monitors the implementation of the UN Guidelines for Consumer Protection and carries out research and provides technical assistance on consumer protection issues (including in the context of e-commerce and the digital economy).

UNCTAD’s work programme on consumer protection is guided, among others, by the UN Conference of Competition and Consumer Protection (held every five years). In 2020, the conference will hold high-level consultations on strengthening consumer protection and competition in the digital economy, and international enforcement co-operation among consumer protection authorities in electronic commerce.

Given the significant imbalances in market power in the digital economy, competition policy is becoming increasingly relevant for developing countries. UNCTAD addresses this issue in the Intergovernmental Group of Experts on Competition Law and Policy.

UNCTAD also runs the Research Partnership Platform, aimed at contributing to the development of best practices in the formulation and implementation of competition and consumer protection laws and policies.

Sustainable development 

UNCTAD works to facilitate and measure progress towards achieving the SDGs, in particular through (but not limited to) its activities in the field of STI for development. The organisation supports countries in their efforts to integrate STI in national development strategies, through initiatives such as Science, Technology and Innovation Policy Reviews and capacity building programmes (such as the Innovation Policy Learning Programme). The eT4a initiative is also intended to contribute to several SDGs, especially in relation to decent work and economic growth, innovation and infrastructure, global partnerships, and gender equality. Moreover, UNCTAD’s SDG Pulse offers statistical information on developments related to the 2030 Agenda for Sustainable Development.

UNCTAD’s Investment Policy Framework for Sustainable Development provides guidance for policymakers in formulating national investment policies and in negotiating investment agreements. The organisation is also part of the Toolbox for Financing for SDGs – a platform launched in 2018 at the initiative of the President of the UN General Assembly to assist countries and financial actors in exploring solutions to the challenges of financing the SDGs.

UNCTAD carries out research and analysis work covering various development-related issues, examples being its Digital Economy Report and the Technical notes on ICT for development. As the body responsible for servicing the UN Commission on Science and Technology for Development (CTSD), UNCTAD also assists the CSTD in its sustainable development-related work, for instance by preparing studies and reports on issues such as the impact of advanced technologies on sustainable development.

Other UNCTAD activities designed to contribute to sustainable development cover issues such as climate change, the circular economy, and intellectual property.

Capacity development 

Many activities undertaken by UNCTAD have a capacity development dimension. For instance, its work on e-commerce and trade includes supporting developing countries in establishing adequate legal frameworks in these areas (e.g. its eCommerce and Law Reform work) and in producing statistics that can guide effective policy-making (e.g. the Measuring E-commerce and the Digital Economy activities and the ICT Policy Reviews ). UNCTAD’s E-Learning on Trade platform provides courses and training on issues such as trade, gender and development and non-tariff measures in trade.

UNCTAD also works to build capacity in STI policy-making in developing countries, through initiatives such as the Innovation Policy Learning programme and STI training provided in the context of the P166 programme.

Additionally, UNCTAD’s Virtual Institute – run in co-operation with universities worldwide – is dedicated to building knowledge for trade and development. Another area where UNCTAD provides capacity building for developing countries is that of statistics: The organisation and its partners assist national statistics organisations in the collection, compilation and dissemination of their statistics in domains such as trade, sustainable development, and investments.

Gender rights online 

UNCTAD runs a Trade, Gender and Development Programme dedicated to assisting countries in developing and implementing gender-sensitive trade policies, conducting gender impact analyses of trade policies and agreements, and strengthening the links between trade and gender. One notable initiative is the eTrade for Women initiative, dedicated to advancing the empowerment of women through ICTs.

Other initiatives undertaken in this area include capacity building on trade and gender, the Women in STEM: Changing the narrative dialogues, and the  Data and statistics for more gender-responsive trade policies in Africa, the Caucasus and Central Asia project.

Data governance? 

As data has become a key resource in the digital economy, data governance is a fundamental part of the work of UNCTAD. This is illustrated, for example, in the research and analysis work of the Digital Economy Report 2019, which focused on the role of data as the source of value in the digital economy and how it is created and captured. Moreover, some of UNCTAD’s work on e-commerce and digital trade touches specifically on privacy and data protection issues. For instance, the eCommerce and Law Reform work dedicated to supporting developing countries in their efforts to establish adequate legal frameworks for e-commerce also covers data protection and privacy among the key issues addressed. The Global Cyberlaw Trackers offers information on data protection laws in UNCTAD member states.

Also relevant for data governance discussions is UNCTAD’s work on statistics, as the organisation collects and analyses a wide range of data on issues such as economic trends, international trade, population, and the digital economy. Moreover, UNCTAD’s SDG Pulse offers statistical information on developments related to the 2030 Agenda for Sustainable Development.

UNCTAD is also running several projects focused on improving the efficiency of data management in the context of activities such as maritime trade (e.g. the Digitising Global Maritime Trade project) and customs operations (e.g. the Automated System for Customs Data).

Digital tools

 UNCTAD has developed several digital tools and online platforms in recent years. Examples include:

Future of meetings

Any reference to online or remote meetings?

Any reference to deliberation or decision making online?

United Nations Human Rights Council

Acronym: UNHRC

Established: 2006

Address: Palais Wilson 52, rue des Pâquis, CH-1201 Geneva, Switzerland

Website: https://www.ohchr.org/EN/HRBodies/HRC/Pages/HRCIndex.aspx

Stakeholder group: International and regional organisations

The Human Rights Council is a United Nations intergovernmental body whose mandate is to strengthen the promotion and protection of human rights around the globe, and to make recommendations on cases of human rights violations. The Council is made up of 47 member states, as elected by the UN General Assembly.

The Council works closely with the Office of the High Commissioner for Human Rights (OHCHR), headed by the High Commissioner for Human Rights, who is the principal human rights official of the United Nation.

Freedom of expression and privacy in the online space are two of the issues covered by the Council in its activities. These have been discussed at UNHRC sessions, and covered in resolutions adopted by the Council, as well as in reports elaborated by the special rapporteurs appointed by the Council. The Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression has issued reports on issues such as: the use of encryption and anonymity to exercise the rights to freedom of opinion and expression in the digital age; states’ surveillance of communications on the exercise of the human rights to privacy and to freedom of opinion and expression; the right to freedom of opinion and expression exercised through the Internet; etc. The Special Rapporteur on the righ to privacy has within its mandate the responsibility to make recommendations for the promotion and protection of the right to privacy, including in connection with challenges arising from new technologies.