A/HRC/43/52 (c) Adopt best practice privacy and data protection standards for all individuals, regardless of gender, to enable them to control their personal information, in particular in relation to sex and gender; (d) Implement the following in the design, construction and operation of products and all services, including profiling and digital welfare services: (i) Gender-equality and privacy protection principles; (ii) Privacy risk management and governance mechanisms, such as privacy by design/default approaches and gender impact analyses; (e) Minimize and restrict data processing relating to gender and ensure that data collected, derived or inferred on gender are in accordance with international human rights law and are stored; (f) Provide easy access to data profiles and monitor for gender bias through, for example, algorithmic auditing; (g) Introduce provisions to enable individuals, regardless of their gender, to remove personal information; (h) Establish guidelines on the development of artificial intelligence, incorporating gender, the right to privacy and principles of data protection; (i) Engage more women and lesbian, gay, bisexual, transgender and intersex persons in the design, development and regulation of digital technologies to develop privacyenhancing technologies and reduce risks of gender-based infringements of privacy; (j) Take all legal, administrative and other measures necessary to fully respect and recognize individuals’ self-defined gender identity, and update privacy statements and redesign tools, systems and processes accordingly; (k) Utilize strong encryption technologies to ensure the privacy of communications and resist requests for user data that do not comply with international human rights standards of lawfulness, proportionality and necessity; (l) Adopt strong policies, procedures and complaint mechanisms for reporting and requesting the removal of harmful content from social media and disseminate such policies and procedures prominently in local languages; (m) Provide training, in particular for front-line staff, on privacy, gender and measures taken to end infringements of privacy within business operations; (n) Educate users on digital security and technological assistance, such as support services, information applications, design choices, terms of service and tools for reporting violations; (o) Report complaints of online violence, by type and number of cases by country, and lawful actions to protect the right to freedom of expression that were taken to respond to incidents of online harassment based on gender; (p) Support research into digital technologies and the experiences of women and the lesbian, gay, bisexual, transgender and intersex community on the extent, causes and effects of infringements of privacy and the harms arising, and on the effectiveness of measures to prevent, eradicate, prosecute and provide reparation for such harm. 46. Business enterprises should: (a) Implement the Guiding Principles on Business and Human Rights and the accompanying guidance on gender to respect the human rights of all persons affected by their practices; (b) Exercise human rights due diligence to identify, prevent, mitigate and address violations of the rights to privacy and non-discrimination based on gender, including through: (i) Human rights impact assessments that incorporate the rights to privacy and gender non-discrimination, when developing or modifying their products and services, and include consultation with civil society organizations and other experts 20