2019 Ranking Digital Rights Corporate Accountability Index

The 2019 Ranking Digital Rights Corporate Accountability Index evaluated 24 of the world's most powerful internet, mobile ecosystem, and telecommunications companies on their publicly disclosed commitments and policies affecting freedom of expression and privacy. These companies held a combined market capitalization of nearly USD 5 trillion. Their products and services are used by a majority of the world's 4.3 billion internet users.

Key findings:

Most companies have taken steps to improve. But they have a long way to go before the internet supports and sustains human rights for everyone. The 2019 RDR Index evaluated 24 companies. Of the 22 also evaluated for 2018, 19 made improvements in the past year—including the new leaders for this year.

1. Microsoft ranked first, mainly due to strong governance and consistent application of its policies across all services. It unseated Google, whose lead since the first RDR Index in 2015 had gradually narrowed, and which tied with Verizon Media (formerly Oath and originally Yahoo) for second place in the Index overall.
2. Telefónica shot ahead of all other telecommunications companies, disclosing significantly more than its peers about policies and practices affecting freedom of expression and privacy. The Madrid-based multinational with operations across Latin America and Europe also made more improvements than all other companies in the RDR Index. Vodafone, which led in 2018, is now in second place, ahead of AT&T, which dropped to third.

People have a right to know. Companies have a responsibility to show. In the past year more companies made public commitments to respect users’ human rights, and demonstrated oversight and accountability around risks to freedom of expression and privacy. New regulations in the European Union and elsewhere also drove many companies to improve disclosures about their handling of user information. Yet few companies scored above 50% in the 2019 Index. When companies fail to meet RDR’s standards for disclosure of commitments, policies, and practices, users are exposed to undisclosed risks affecting their freedom of expression and privacy.

1. PRIVACY: Most companies still fail to disclose important aspects of how they handle and secure personal data. Despite new regulations in the EU and elsewhere, most of the world’s internet users are still deprived of basic facts about who can access their personal information under what circumstances, and how to control its collection and use.
2. GOVERNANCE: Threats to users caused by companies’ business models, and deployment of new technologies, are not well understood or managed. Most companies are not prepared to identify and manage risks such as those associated with targeted advertising and automated decision making. Nor do companies offer adequate grievance and remedy mechanisms to ensure that harms can be reported and rectified.
3. EXPRESSION: Transparency about policing of online speech remains inadequate. As companies struggle to address the harms caused by hate speech and disinformation, they are not doing enough to help users see who has power over their ability to speak or access information through the companies’ platforms or services. Insufficient transparency increases the risk of censorship and manipulation by governments, companies, and others.
4. GOVERNMENT DEMANDS: Transparency about demands that governments make of companies is also inadequate. Companies disclose insufficient information about how they handle government demands for access to user data, or to restrict speech. As a result, in most countries, government censorship and surveillance powers are not subject to adequate oversight to prevent abuse or maintain public accountability.

For the full report with interactive data and analysis, company report cards, methodology, raw data and other resources for download, please visit: https://rankingdigitalrights.org/index2019.