It is primarily the obligation of states to make sure that laws, regulations and policies applicable to internet intermediaries effectively safeguard the human rights and fundamental freedoms of users. At the same time and in line with the UN Guiding Principles on Business and Human Rights however, internet intermediaries have the responsibility to respect the internationally recognised human rights of their users and of third parties affected by their activities. States and intermediaries therefore have to work together. The higher the impact and the potential damage inflicted on rights by internet intermediaries, the greater the precautions they must employ when developing and applying their terms and conditions of service, community standards and codes of ethics.

Any request, demand or other action by public authorities addressed to internet intermediaries must, in line with the European Convention on Human Rights, be prescribed by law, be exercised within the limits of the law and constitute a necessary and proportionate measure in a democratic society. All regulatory frameworks, including co- or selfregulatory frameworks should have effective oversight mechanisms. The process of enacting legislation applicable to internet intermediaries should be transparent and inclusive. The relevant legislation should be accessible and foreseeable, should clearly define powers granted to public authorities, and should be interpreted, applied and enforced without discrimination.

Any demand to internet intermediaries to restrict access to content shall meet the conditions foreseen in Article 10 of the European Convention on Human Rights. State authorities should carefully evaluate the possible, including unintended, impact on freedom of expression and should apply the least intrusive means. State authorities should also ensure that effective redress mechanisms are made available and adhere to applicable procedural safeguards. Any interference by intermediaries with the free flow of information and ideas should be based on clear and transparent policies and be limited to specific legitimate purposes, as determined by law, through instruction by a competent authority, or in accordance with the company’s own content restriction policies or codes of ethics. When restricting access to content in line with their own contentrestriction policies, intermediaries should do so in a transparent and non-discriminatory manner.

Intermediaries should not disclose personal data to a third party unless required by law or requested do to so by a judicial or other competent authority whose decisions are subject to judicial review, that has determined that disclosure is consistent with law. Intermediaries should limit the processing of users` personal data to what is necessary to achieve a clearly defined purpose, which is explicitly and clearly communicated to all users in a proactive manner. The processing of personal data shall be based on the free, specific, informed and unambiguous consent of the user, with respect to the specific purpose, or on another legitimate basis defined in the Convention on the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108).

States should guarantee access to effective judicial and non-judicial procedures against all alleged violations of the European Convention on Human Rights in the digital environment by internet intermediaries or third parties.

All terms of service agreements and policies shall be publicly available in clear, plain language and accessible formats. Users shall be notified in advance of all changes in relevant policies. The process of drafting and applying terms of service should be transparent, accountable and inclusive. Intermediaries should provide meaningful public information about the operation of automated data processing techniques, including the operation of algorithms that facilitate searches based on user profiling. Intermediaries should regularly publish transparency reports that provide clear and meaningful information on all restrictions to the free and open flow of information and ideas.

Guidance note on best practices towards effective legal and procedural frameworks for self-regulatory and co-regulatory mechanisms of content moderation

The Council of Europe commissioned to the Swiss Institute of Comparative Law a comparative study in respect of filtering, blocking and take-down of illegal content on the internet in the 47 member states of the Organisation. This study describes and assesses the legal framework but also the relevant case-law and practice in the field. It is divided in two main parts: country reports and comparative considerations.

The finding of this report demonstrate just how difficult it can be for Internet users to understand and thereby consent to the terms of service of online platforms in order to make fully informed decisions on issues which affect their human rights such as content restriction policies and processing of personal data.

Jointly organized by the Council of Europe and the OSCE presidency, the Conference (Vienna, 13 October 2017) provided floor for debate on crucial issues related to human rights on the internet. Read the Conference report.