The Implementation Guidelines provide more detailed guidance to ICT companies on how to put the Principles into practice, and also provide the framework for collaboration among companies, NGOs, investors and academics. When faced with demands to remove or limit access to content or restrict communications, participating companies are to:
- operate in a transparent manner when required to remove content or restrict access;
- disclose to users the applicable laws and policies requiring such action and the company's policies for responding to such demands; and
- provide timely notice to users when access to content has been blocked or communications limited due to government restrictions.
With respect to privacy, participating companies commit to assess the human rights risks associated with the collection, storage, and retention of personal information and to develop mitigation strategies.
The guidelines are regularly reviewed and revised to take into account actual experience, evolving circumstances, and stakeholder feedback.