What Companies Can Do to Protect Privacy and Free Speech: The ACLU Guide

Over the past few years, scandal after scandal has put tech companies under a microscope. Users, policymakers, and investors are demanding to know how companies are protecting privacy and free speech, and companies that fail to do so are being held accountable, by the government, by their users, and by their employees. Businesses large and small need to take proactive steps to protect users and find ways to navigate this landscape.

The ACLU of California has a guide to help: Privacy and Free Speech: It's Good for Business, which offers advice for companies wrestling with today’s most pressing challenges.

The industry can do better. It must do better. Right now, governments are seeking massive volumes of information from tech companies. Democracy is under threat by people exploiting poor privacy practices to suppress speech and weaponize personal information. The Trump administration is trying to exploit online services to monitor immigrants, activists, and entire neighborhoods. And a stream of data breaches is endangering users and exposing companies to massive potential liability.

Mistakes in this climate can be catastrophic, for both users and a company’s long-term viability. Anticipating threats and protecting users isn’t just the right thing to do, it’s also critical for business.  

To protect people’s rights, companies must plan ahead, ask difficult questions early, and build privacy not just into their products, but into their business models. The ACLU guide offers over 100 case studies that illustrate the benefits of building a business on a foundation of privacy and free speech. Other case studies show the serious risks, for both users and the business, when companies fail to do so.

The guide includes expert advice, identifies common mistakes, and gives clear guidance on how to avoid them. For example, companies must respect their data by only collecting what’s needed, protecting users, and avoiding replicating destructive real-world biases. Had Facebook limited and protected the data it collected, Cambridge Analytica couldn’t have abused user data and the company could have avoided the lasting reputational harm from users who find the company’s numerous privacy failures unacceptable.

We show companies how to plan ahead by building privacy and security practices and policies into organizations’ structure and product-design process. With proper planning, Equifax could have prevented a hacking nightmare that exposed highly sensitive personal information of 143 million people and led to the largest class-action suit in history.

Read our guide on Privacy and Speech in Business

We also highlight how to promote privacy by communicating clearly with users about what data a company collects and what it does with the data. If Venmo had been transparent about its default privacy settings, then it wouldn’t have come under fire from users furious that years of their transaction histories end up being aired publicly.

We illustrate how companies can support diverse voices, encourage free expression, and only remove content when it is illegal or specifically harmful. By following this advice, PayPal could have avoided a barrage of public criticism for threatening to kick book publishers off its platform unless they removed “offending literature” from their catalogs.

And we provide concrete examples of how companies can effectively partner with users by putting them in control of their data and standing up for their civil and human rights. Twitter, for example, was hailed for protecting its users when it sued U.S. Customs and Border Protection over a request to unconstitutionally identify and share the personal information of an online critic.

Time and again, companies have learned firsthand that taking proactive steps to design user-protective products and business plans builds long-term sustainability, while failing to do so can lead to public relations nightmares, costly lawsuits, and government investigations.

The stakes are simply too high to ignore privacy and free speech, and with this guide, companies will have an important tool to protect their users and build their bottom line.

View comments (3)
Read the Terms of Use

Dr. Timothy Leary

There is no sense in having free speech if you are already brain washed.


Electronic and computer technology have done great things for consumers but modern technology has also brought us into a "Dark Ages" in other ways. As for privacy, many Americans are afraid to research certain topics since there is a permanent record of what they were searching for or logged on to. Judges have not kept pace with checks & balances on the these agencies so that they don't punish legal First Amendment exercises. In this system legal First Amendment activity is essentially viewed as probable cause to illegally violate your Fourth Amendment rights (ex: Black Lives Matter searches or Tea Party searches, etc.). Investigating a non-crime with non-probable cause, acting as a "Thought Police". The federal government is investing in technology to record every actual conversation of every phone call (like a tape-recorder). In this system, they could play back an entire phone conversion from 2008 or longer. If you comment on Facebook or social media, that comment may considered "probable cause" by an unaccountable bureaucrat or contractor to investigate you.

This technology has made "customer service" from companies far worse, most Americans want to talk to a real human with the capability to resolve their issue. Companies should be investing their resources here not invading our privacy.

It has made personal relationships far worse. Not that long ago a consumer had to pay for long-distance phone calls, there was no email or Skype or Facebook. It's easier to communicate today than at any time in history without expensive phone bills. Try inviting your "friends" on Facebook to an in-person lunch or event, you might get a 1% success rate if lucky. Americans are more impersonal today than at any time in history.

Many Americans don't want this technology in their homes, automobiles or workplace. Smart companies should offer a "Privacy Option" on all of their products.


Legally and constitutionally, the Judicial Branch [U.S. Supreme Court] needs to make it crystal clear to the Executive Branch agencies that an individual's "Bill of Rights" = a person's "private property". The police don't own this property, the feds don't own this property and corporations don't own this property - we do! Nobody has the right to our property without going to a judge and obtaining a judicial warrant or obtaing our permission. Not everything is the government's business, only things with "probable cause" under the Fourth Amendment.

Stay Informed