The resolution sets expectations for companies to provide safeguards, minimise data collection and be transparent about data processing, going beyond the resolutions the UN General Assembly passed earlier on surveillance and mass data collection, Access Now reports.
Moreover, the resolution calls for governments to create legislations on data protection against “unlawful and arbitrary collection, processing, retention or use of personal data by individuals, governments, business enterprises and private organizations”. Finally, the document seems to give implicite support to encryption by calling for companies to develop technologies that protect their users’ data, as well as for governments to restrain from “requiring business enterprises to take steps that interfere with the right to privacy”.
According to Access Now, the UN General Assembly will adopt the resolution in December, after which it is up to governments and companies around the world to implement its recommendations.