Who this is relevant for
Potential applicants include journalists, legal professionals, human-rights defenders and people concerned about cross-border misuse of digital surveillance or biometric information. Others may be affected by indiscriminate data collection, unlawful public disclosure or a security measure linked to counter-terrorism legislation.
Scope and procedure
The UN Special Rapporteur on the right to privacy examines privacy-related human-rights concerns. Other mandates may overlap where surveillance targets defenders, expression or lawful association, or arises from counter-terrorism policy. There is no UN Special Rapporteur on GDPR: EU data-protection complaints are ordinarily considered under the GDPR framework by competent supervisory authorities and courts, subject to jurisdiction.
Evidence, strategy and submission preparation
A coherent evidence file documents the suspected act, device or dataset, dates, concrete impact, known official authorisations and the reliability of technical assessments. Preserve original digital records when safe, distinguish independent forensic findings from unverified apps or rumours and assess risks before publishing potentially identifying information about targets or sources.
Practical checklist
- Describe the concrete intrusion, dates and affected personal information.
- Preserve verified technical reports and original source files.
- Identify any known state actor, legal order or institutional policy.
- Consider national privacy remedies and EU GDPR routes where applicable.
- Evaluate exposure risks before sending personal data or witness identities.
Key considerations and documents
| Issue | What to verify |
|---|---|
| Device surveillance | Forensic findings, access logs and the limits of technical attribution. |
| Mass data collection | Law or policy, affected population and available public evidence. |
| Cross-border data transfer | Originating and recipient actors, provenance and actual rights impact. |
| GDPR route | Applicable EU data-protection authority or court; separate from UN mandate. |
What outcomes and limitations should you expect?
The Rapporteur cannot act as a GDPR supervisory authority, erase a database by order or guarantee a criminal investigation. International attention is discretionary. Claims of spyware or state attribution should not be published as established facts without credible independent support.
How our team can help
A problem label alone does not establish a rights violation or the competence of a UN mechanism. We can compare fact patterns, responsible actors, territorial and treaty prerequisites, domestic options and urgent risks before recommending a narrow, evidence-based submission strategy.
Frequently asked questions
Can I send a GDPR complaint to a UN Rapporteur?
GDPR complaints ordinarily follow EU supervisory and judicial processes; a separate privacy human-rights issue may be examined under the UN mandate.
Is a suspicious phone alert enough proof?
Not necessarily. Independent technical validation and provenance may be needed.
Does UN reporting remove surveillance tools?
No. Special Procedures communications are not technical takedown orders.
Request an assessment
Request a privacy-rights and evidence assessment without sharing raw device or identity data over open email.
Next step: Request a confidential case assessment.
Related pages
- UN Special Rapporteur on the Right to Privacy
- UN Special Rapporteur on Human Rights and Counter-Terrorism
- Human Rights Evidence Collection and Case Documentation
Official references
- OHCHR current thematic mandate registry
- OHCHR Special Procedures submission guidance
- EU European Data Protection Board
Independent informational website. Not an official United Nations or OHCHR service. UN mechanisms assess matters independently; filing does not guarantee intervention, an outcome or a particular timeline.