Possible gaps in dealing with encryption The mechanisms analysed appear to indicate the existence of a policy gap in ensuring human rights considerations (freedom of expression, protection of privacy) in the encryption standardisation process. The encryption standardisation process is limited in term of ensuring the right balance between security and human rights considerations (freedom of expression, protection of privacy). 3.7 Spam Spam is usually defined as unsolicited e-mail sent to a wide number of Internet users. Spam is mainly used for commercial promotion. Its other uses include social activism, political campaigning, and the distribution of pornographic materials. Status of governance mechanisms for spam The most proactive international actor dealing with spam is the OECD, which has established a task force on spam and prepared an anti-spam toolkit. At the regional level, the EU established the Network of Anti-Spam Enforcement Agencies, and APEC prepared a set of consumer guidelines. The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) brings the messaging industry together to work collaboratively and to successfully address the various forms of messaging abuse. The Anti-Spam Technical Alliance gathers leading Internet companies that host e-mail accounts. The IGF provided a number of best practices on combating spam within its Best Practices Forum in 2014. Spam relates most directly to the following Internet policy issues: technical standards, net neutrality, cybercrime, child safety, digital signatures, freedom of expression, privacy, jurisdiction, intermediaries, e-commerce, consumer protection, access, the digital divide, and content policy. Possible gaps in dealing with spam Spam continues to be a problem in many countries. This may be due to insufficient capacity and technical tools to combat it. The mechanisms analysed appear to also indicate the existence of a gap on the availability of information on spam related issues. There is not enough reliable evidence and data on spam and its cost and consequences. 23