Guiding governments and the private sector to protect freedom of expression and privacy online