No one shall be subjected to arbitrary or unlawful interference with his privacy, family, home or correspondence, nor to unlawful attacks on his honour and reputation. (ICCPR, Article 17(1))
Business enterprises (including Technology companies) that collect, store, use and share data should carry out human rights due diligence across their activities to identify, prevent, mitigate and remedy human rights harm related to their activities. (UN Guiding Principles on Business and Human Rights II. B.17)