BUSINESS & HUMAN RIGHTS
Human Rights as Strategy: Rethinking Power, Responsibility, and Organisational Purpose
By Dr Zamda Mutamuliza· 22 June 2026· 6 min read
In Brief
- Most organisations encounter human rights as a reporting requirement or reputational risk, managed at the margins rather than at the centre of strategic decision-making.
- The UN Guiding Principles establish that corporate power creates corporate responsibility, regardless of whether the law has caught up.
- The real question is not whether your organisation respects human rights in principle, but whether the people most affected by its decisions would recognise that respect in practice.
Most organisations have a purpose statement. Very few have one that survives contact with the people most affected by their decisions. Human rights change that conversation. They do not ask what you intend. They ask what you do, what you cause, and who bears the consequences. That shift from aspiration to accountability is where purpose either becomes real or remains decorative, yet most organisations still manage human rights at the margins, in sustainability teams and procurement policies, rather than at the centre of strategic decision-making. That is a costly mistake, not just ethically, but strategically.
Human rights are a framework for understanding power: who has it, who is affected by it, and what responsibilities follow. The UN Guiding Principles on Business and Human Rights are built on that premise: corporate power creates corporate responsibility, regardless of whether the law has caught up. Organisations that understand this are not simply more ethical. They are better governed, more resilient, and more defensible when scrutiny arrives.
The most consequential human rights failures are rarely acts of intent. They are acts of inattention: strategies optimised for efficiency, supply chains designed for margin, governance systems built around the organisation’s own risk rather than other people’s rights. The solution is not better values. It is better design.
Power is the starting point
Power over people takes many forms: the factory that determines whether workers have safe conditions, the platform that decides whose voice is amplified, the algorithm that determines who is offered insurance, employment, or housing. An organisation does not need to be malicious for harm to occur. It needs only to be inattentive.
The ICCPR and ICESCR establish individual rights as a baseline that organisations cannot trade away in the name of commercial logic. The UNGPs translate that into an operational expectation: know your impact, prevent harm, provide remedy. That is a governance discipline.
Responsibility beyond the legal floor
The corporate responsibility to respect human rights exists independently of what the law requires. Operating lawfully in a jurisdiction with weak labour standards does not discharge that responsibility. Sourcing from suppliers who meet contractual requirements is not enough if those suppliers are causing harm. Legal compliance is a floor, not a strategy.
The OHCHR Interpretive Guide makes this operational: avoid causing or contributing to adverse impacts, prevent or mitigate impacts linked through business relationships, and use leverage where you are connected to harm but did not directly cause it. The question for leaders is not “are we legal?” It is “are we responsible?”
Due diligence is a discipline, not a process
In many organisations, human rights due diligence is reduced to a checkbox: a periodic audit, a supplier questionnaire, a disclosure template. That misses the point.
The OECD Due Diligence Guidance covers suppliers, subcontractors, joint ventures, and business partners across the full value chain. Traditional risk management asks what could go wrong for the organisation. Human rights due diligence asks what the organisation is doing, or failing to prevent, that could go wrong for other people. Those are different questions with different implications for strategy and procurement.
Meaningful engagement with affected people is where most organisations fall furthest short. The most affected are frequently the least powerful: workers in informal employment, communities near extraction sites, supply chain workers in jurisdictions with weak enforcement. Designing engagement around the people easiest to reach, rather than those at greatest risk, excludes the voices that matter most.
The regulatory shift is accelerating
Organisations still treating human rights as voluntary are accumulating compliance exposure without realising it. The EU Corporate Sustainability Due Diligence Directive (CSDDD), adopted in 2024, requires large companies to identify, prevent, and mitigate adverse human rights impacts across their value chains, and introduces civil liability for failure. Germany’s Supply Chain Act, France’s Duty of Vigilance Law, and the UK Modern Slavery Act complete a patchwork of mandatory obligations that is only thickening.
What was once voluntary best practice is becoming a mandatory baseline. The organisations best positioned are those that built the capability before the requirement arrived, because genuine due diligence cannot be retrofitted overnight when a regulatory deadline approaches.
Global Standards Brief
Instrument | Jurisdiction | Core Requirement |
Global | State duty to protect, corporate responsibility to respect, access to remedy | |
Global / OECD members | Due diligence across full value chain | |
European Union | Identify, prevent, mitigate adverse impacts; civil liability for failure | |
Germany | Mandatory human rights and environmental due diligence | |
France | Vigilance plans covering human rights risks across operations and supply chains | |
United Kingdom | Annual transparency statements on modern slavery |
Intelligence Note: AI and the due diligence gap
When AI determines who receives credit, who is shortlisted for employment, or whose insurance claim is approved, the organisation is exercising power over fundamental rights at a scale and speed traditional due diligence was not built to assess. The affected person typically has no visibility of the decision logic and no meaningful route to contestation. That combination of scale, opacity, and inaccessibility creates precisely the conditions the UNGPs were designed to address, applied to a context they did not anticipate.
The EU AI Act’s high-risk classification establishes a compliance floor, but organisations deploying such systems should treat human rights impact assessment as a due diligence requirement. The question is not whether the algorithm is accurate. It is who bears the cost when it is wrong.
Where practice is currently weakest
Four failure patterns show up most consistently across organisations:
- Supply chain depth: Visibility typically reaches tier-one suppliers and degrades rapidly beyond that, precisely where serious risks concentrate
- Affected people engagement: Consultation is designed around organisational convenience rather than genuine access
- Decision integration: Human rights considerations typically arrive after commercial decisions are made, limiting their role to mitigation rather than prevention
- Grievance mechanisms: Often inaccessible to the workers and communities most likely to need them
The Human Rights Readiness Diagnostic
Before your next board meeting, audit review, or governance reset, ask:
- Have we mapped the people most affected by this decision and the rights most at stake?
- Do we have processes to identify harm before it occurs, not only after it is reported?
- Are affected people genuinely able to raise concerns, and do those concerns reach decision-makers?
- Can we demonstrate, not just assert, that our supply chain and business relationships meet our human rights commitments?
- If our human rights performance were made public in full, would we stand by it?
If these questions expose gaps, they are governance gaps, not sustainability ones.
Closing Reflection
The organisations most exposed to human rights risk are rarely those that set out to cause harm. They are the ones that built strategies, supply chains, and operating models without seriously asking who bears the consequences. That inattention compounds quietly, well before it becomes visible.
The harder question is not whether your organisation respects human rights in principle. It is whether the people most affected by your decisions would recognise that respect in practice, and whether you have any reliable way of knowing the answer. Human rights are not a constraint on organisational ambition. They are the clearest test of whether that ambition is worth pursuing.
GRIA Review publishes analysis on governance, human rights, responsible business, and institutional accountability. If this piece raised questions relevant to your organisation, explore our other articles or write for us.