Citizens' rights cannot be protected if their digital activities are governed and policed by opaque and publicly unaccountable corporate mechanisms.