The right to privacy in the digital age
5.
A/RES/71/199
Calls upon all States:
(a) To respect and protect the right to privacy, including in the context of
digital communications;
(b) To take measures to put an end to violations of the right to privacy and to
create the conditions to prevent such violations, including by ensuring that relevant
national legislation complies with their obligations under international human
rights law;
(c) To review their procedures, practices and legislation regarding the
surveillance of communications, their interception and the collection of personal
data, including mass surveillance, interception and collection, with a view to
upholding the right to privacy by ensuring the full and effective implementation of
all their obligations under international human rights law;
(d) To establish or maintain existing independent, effective, adequately
resourced and impartial judicial, administrative and/or parliamentary domestic
oversight mechanisms capable of ensuring transparency, as appropriate, and
accountability for State surveillance of communications, their interception and the
collection of personal data;
(e) To provide individuals whose right to privacy has been violated by
unlawful or arbitrary surveillance with access to an effective remedy, consistent
with international human rights obligations;
(f) To develop or maintain and implement adequate legislation, with
effective sanctions and remedies, that protects individuals against violations and
abuses of the right to privacy, namely through the unlawful and arbitrary collection,
processing, retention or use of personal data by individuals, governments, busin ess
enterprises and private organizations;
(g) To further develop or maintain, in this regard, preventive measures and
remedies for violations and abuses regarding the right to privacy in the digital age
that may affect all individuals, including where there are particular effects for
women, as well as children and those vulnerable and marginalized;
(h) To promote quality education and lifelong education opportunities for all
to foster, inter alia, digital literacy and the technical skills required to ef fectively
protect their privacy;
(i) To refrain from requiring business enterprises to take steps that interfere
with the right to privacy in an arbitrary or unlawful way;
(j) To consider appropriate measures that would enable business enterprises
to adopt adequate voluntary transparency measures with regard to requests by State
authorities for access to private user data and information;
(k) To develop or maintain legislation, preventive measures and remedies
addressing harm from the sale or multiple resale or other corporate sharing of
personal data without the individual’s free, explicit and informed consent;
6.
Calls upon business enterprises:
(a) To meet their responsibility to respect human rights in accordance with
the Guiding Principles on Business and Human Rights: Implementing the United
5/6