Good Practices
Carry out human rights due diligence in order to identify, prevent, mitigate and account for how the company addresses its adverse human rights impacts.
UN Guiding Principles on Business and Human Rights, no. 15–21
- Identify and assess actual and potential human rights risks and impacts related to company presence and activities. Human rights due diligence should:
- Incorporate findings from any security risk assessments (see Private security within risk and impact assessment – Working with Private Security Providers).
- Be informed by stakeholder mapping, consultation and engagement. Key stakeholders include communities, business relationships, government actors and other persons potentially impacted by the business activities.
- Build on an analysis of the operating context, including its history of human rights abuses, its legal system and a conflict analysis (if there are tensions in the context).
- Act upon the findings: prevent, mitigate and address any actual or potential impacts. Prioritise which impacts to address first on the basis of severity (judged by scale, scope and irremediability).
- Map responses over time, while protecting the identify of respondents in order to prevent reprisals.
- Communicate how impacts are addressed.
- Ensure impacts on vulnerable groups (such as children, older persons, indigenous peoples and women are assessed in particular.
- Ensure that the human rights due diligence process:
- Covers adverse human rights impacts that the company may cause or contribute to through its own activities. According to the UN Guiding Principles on Business and Human Rights, this includes impacts which may be ‘directly linked to its operations, products or services by its business relationships, even if they have not contributed to those impacts’. Additionally, ‘“activities” are understood to include both actions and omissions’.
- Varies in complexity with the size of the enterprise, the risk of severe human rights impacts, and the nature and context of its operations.
- Is revisited in an ongoing manner, recognising that the human rights risks may change over time as the business enterprise’s operations and operating context evolve.
- Assess local capacity to investigate abuses and provide for proper resolution. According to the Voluntary Principles on Security and Human Rights, risk and impact assessments should ‘consider the local prosecuting authority and judiciary’s capacity to hold accountable those responsible for human rights abuses and for those responsible for violations of international humanitarian law in a manner that respects the rights of the accused’.
Key Resources
Engage with national, regional and local authorities.
- Hold bilateral meetings with host government representatives. Keeping these discussions confidential may make company efforts more effective by providing a safe space for dialogue in a non-attributive manner.
- Use leverage to reduce adverse human rights impacts as a result of business relationships. As explained by the UN Guiding Principles on Business and Human Rights, ‘Leverage may be increased by, for example, offering capacity-building or other incentives to the related entity, or collaborating with other actors’.
Key Resources
Consult with potentially affected groups and other relevant stakeholders.
Engage in pro-active monitoring rather than just responding to complaints.
- Establish a company policy on what employees should do in case of an alleged human rights violation by public security forces.
- Include the establishment of a monitoring system in the memorandum of understanding between the company and the host government.
- Record all allegations. Ensure that reporting and complaints procedures include provisions on how and where to record allegations of human rights violations in a confidential and reliable manner, as well as how to refer incidents to the company grievance mechanism.
- Ensure evidence is reliable. According to the Voluntary Principles on Security and Human Rights, ‘Every effort should be made to ensure that information used as the basis for allegations of human rights abuses is credible and based on reliable evidence’.
- Consider joining or creating an external stakeholder advisory panel to help monitor security and human rights issues.
- The Voluntary Principles on Security and Human Rights Implementation Guidance Tools say that companies should ‘include stakeholders with legitimacy in the eyes of public security providers’.
- Ensure the local population participates in monitoring mechanisms. It is particularly important that the needs of most vulnerable groups, including women and indigenous people, are adequately represented in the panel.
Provide for or cooperate in the remediation of adverse impacts the company has caused or contributed to through legitimate processes
(see Community mistrust: ensuring an effective company grievance mechanism within Stakeholder engagement strategy – Working with Communities).
UN Guiding Principles on Business and Human Rights, no. 22
In-Country Working Groups as Tools for Cooperation and Remediation: A Case Study in the Democratic Republic of the Congo
View Content
Establish an operational-level grievance mechanism that allows individuals to anonymously report any abuse
(see Community mistrust: ensuring an effective company grievance mechanism within Stakeholder engagement strategy – Working with Communities).
UN Guiding Principles on Business and Human Rights, no. 31
- Ensure the grievance mechanism is accessible. Note that accessibility also relates to language, literacy and social position; ensure that the procedure is available in local languages, that it is explained orally by community officers (if literacy is an issue) and that access for persons with limited mobility is considered (e.g. women who cannot leave their home alone).
- Consider establishing some or all of the following access points:
- A ‘report abuse’ hotline, accessible either via phone or SMS.
- A secure e-mail address that is solely accessible by a trusted monitor.
- Tip boxes with clear instructions posted above them, located in areas where individuals have unobserved access to the boxes and can drop in anonymous notes, tips or other information.
- A community office where complainants can report their claims in person. Ensure that this is easily accessible to all potential claimants. If it is clear that certain members of the potentially affected community are not able to access the office, mobile teams should be sent to engage with the community and carry out the grievance process in their location.
- Ensure the grievance mechanism accepts a wide range of complaints. It is not necessary to wait until an issue amounts to an alleged human rights abuse or a breach of other standards before addressing it.
- BP’s implementation guidance on the Voluntary Principles on Security and Human Rights recommend, ‘Where businesses are aware of alleged violations within their area of operations, whether or not a grievance is raised, record the allegation and any actions taken’.
- Grievance mechanisms should be culturally appropriate and handle grievances in a way that is accepted by the community.
- The UN Office of the High Commissioner for Human Rights explains companies should make the grievance mechanism ‘known to, and trusted by, those stakeholders for whom it is intended’.
- Be mindful that barriers to accessibility of grievance mechanisms can be gender-specific. These barriers need to be considered and addressed from a gender-sensitive perspective.
Practical Tools
Verify that operating procedures include an obligation to ensure that medical attention is provided to injured parties when force is used.
Voluntary Principles on Security and Human Rights, p. 4
Report abuses.
- Educate company staff about the obligation to report allegations so that appropriate inquires can take place. The company has a greater ability to influence its own workforce than it has with other security stakeholders.
- Report any credible and verified allegations of human rights abuses and violations of international humanitarian law within the company’s areas of operations, including abuses perpetrated by public security. Ensure these incidents are reported to appropriate host government authorities. Request that the investigation take place at the most local-level office that has the authority to conduct an incident investigation, as long as that authority is not involved with the incident.
- Ensure the public prosecutor’s office, or equivalent entity, is informed of any credible allegations.
- Ensure legal and physical protection for victims and those making the allegations.
Request that the alleged perpetrators are withdrawn from the site until an official investigation is concluded.
Actively follow up on the status of investigations and press for proper resolution.
Voluntary Principles on Security and Human Rights, p. 5
- As explained by the World Bank Group and Anvil Mining, companies should conduct a full-scale internal investigation ‘if the alleged incident occurred on company property, if it involved company equipment, or if it occurred because of company activities or operations. […] A similar inquiry is appropriate for allegations that occur in the company’s areas of operations.’
- Where appropriate, urge that investigation and action be taken to prevent any recurrence. According to the Voluntary Principles on Security and Human Rights, companies should ‘do as much as possible to ensure that the host government investigates any human rights abuse allegations, protects victim(s) and resolves the situation according to the rule of law’.
Involve other stakeholders in the follow-up of investigations.
- Share information about security incidents with community representatives, the host government and relevant national accountability mechanisms.
- Inform the national ombudsman or human rights agency with the responsibility for investigating human rights allegations so that they can ensure a proper investigation is conducted and disciplinary legal action is taken, when justified.
- Support NGOs and civil society in their efforts to actively monitor security policies and practices that affect their constituents, as well as their efforts to advocate for appropriate solutions.
- Engage with home country governments and international organisations. According to the Voluntary Principles on Security and Human Rights Implementation and Guidance Tools, home governments and international organisations ‘can serve as important interlocutors between the company and the host government during instances of human rights (and international humanitarian law) abuse allegations’. This is also a good way to safeguard good relationships with authorities and avoid the perception of undue influence.
- When the incident triggers a significant amount of concern from external stakeholders such as international organisations, home governments or NGOs—consider commissioning an external investigation.
Track effectiveness of responses to allegations.
- According to the UN Guiding Principles on Business and Human Rights, tracking effectiveness should be done on the basis of ‘appropriate qualitative and quantitative indicators’ and drawing on ‘feedback from both internal and external sources, including affected stakeholders’.
Conduct lessons learned exercises, both internally and externally, with all appropriate stakeholders.
Voluntary Principles on Security and Human Rights: Implementation Guidance Tools, p. 46 (International Council on Mining and Metals, International Committee of the Red Cross, International Finance Corporation and IPIECA 2011)
- Wherever a significant human rights impact has occurred, initiate a process to identify how and why it occurred. This is important to prevent or mitigate its continuation or recurrence. As discussed by the UN Office of the High Commissioner for Human Rights, ‘If the evidence is sufficiently clear, linking this kind of analysis to staff incentives and disincentives, whether financial compensation, promotion or other rewards, can play an important role in helping to embed respect for human rights into the practices of the enterprise’.
- As applicable, work with public security providers to share, discuss and apply lessons learned.