rights” and “integrate the 昀椀ndings from their impact assessments across relevant internal functions and processes and take appropriate action.” › Principle 5 of the CRBPs states that companies should “seek opportunities to support children’s rights through products and services, as well as their distribution.” Technical Measures RECOMMENDATION 18 PRIORITY: MEDIUM Implement technical barriers to minimize data collection, storage, and sharing. To minimize risk associated with data collection, storage, and sharing, the Tech Coalition should uphold the following privacy principles: › Data Minimization: The processing of personal data should be adequate, relevant, and limited to necessity of the purpose for which it is being processed. › Storage Limitations: Personal data should only be retained for the period of time that is necessary for the purposes for which it was processed. Technical measures that can be implemented to uphold these principles include the following: › Con昀椀gure the database such that users cannot bulk download all signals. This can help minimize the risk that the signals are shared with external parties (e.g., government of昀椀cials) or are shared with too many people. › Con昀椀gure the database such that, by default, certain signals are shared only with participants for whom those signals may be relevant. › Establish time limits on how long sensitive or personal data is present in the database. › Establish time limits for false or unactioned signals so that these are automatically removed after a certain period of time. Implementing this recommendation: This recommendation would be implemented by the Tech Coalition and Meta. RATIONALE › Principle 19 of the UNGPs states that “If the business enterprise has leverage to prevent or mitigate the adverse impact, it should exercise it. And if it lacks leverage there may be ways for the enterprise to increase it.” › Principle 5 of the CRBPs states that companies should “seek opportunities to support children’s rights through products and services, as well as their distribution.” › Privacy and data protection principles based on the human rights framework include data mini- mization and storage limitation, among others. BSR TECH COALITION HUMAN RIGHTS IMPACT ASSESSMENT 61