23 Commentary Tracking is necessary in order for a business enterprise to know if its human rights policies are being implemented optimally, whether it has responded effectively to the identified human rights impacts, and to drive continuous improvement. Business enterprises should make particular efforts to track the effectiveness of their responses to impacts on individuals from groups or populations that may be at heightened risk of vulnerability or marginalization. Tracking should be integrated into relevant internal reporting processes. Business enterprises might employ tools they already use in relation to other issues. This could include performance contracts and reviews as well as surveys and audits, using gender-disaggregated data where relevant. Operational-level grievance mechanisms can also provide important feedback on the effectiveness of the business enterprise’s human rights due diligence from those directly affected (see Principle 29). 21. In order to account for how they address their human rights impacts, business enterprises should be prepared to communicate this externally, particularly when concerns are raised by or on behalf of affected stakeholders. Business enterprises whose operations or operating contexts pose risks of severe human rights impacts should report formally on how they address them. In all instances, communications should: (a) Be of a form and frequency that reflect an enterprise’s human rights impacts and that are accessible to its intended audiences; (b) Provide information that is sufficient to evaluate the adequacy of an enterprise’s response to the particular human rights impact involved; (c) In turn not pose risks to affected stakeholders, personnel or to legitimate requirements of commercial confidentiality. Commentary The responsibility to respect human rights requires that business enterprises have in place policies and processes through which they can both know