The article concerns the role of Facebook in human rights abuses in Myanmar and seeks to examine how its actions can be addressed within the framework provided by the United Nations Guiding Principles on Business and Human Rights (the UNGPs). Beginning with the uncertainty surrounding the status of corporations in international law, the article emphasizes the distinction between the duty of states to protect human rights and the responsibility of business enterprises to respect human rights. Subsequently, it proceeds to indicate specific international human rights norms that could have guided the conduct of Facebook and that it was expected to respect: Articles 19 and 20 of the International Covenant on Civil and Political Rights. Next, it provides an analysis of human rights due diligence standard, prescribed by the UNGPs, demonstrating how it could have been applied in the given state of facts and how Facebook has failed to meet it. It is also argued that mandatory human rights due diligence, though gradually being implemented in numerous domestic legal systems, has not yet transformed into an obligation of international law that would be binding on business enterprises. Finally, the article highlights the position of states as the main actors in international law — at its current stage of development — that are bound by a different due diligence standard that is specific to them. It concludes with a thesis that if states fail to discharge their proper duties to regulate activities of companies operating within their jurisdiction and to provide victims of human rights abuses with an access to remedy, they can incur international legal responsibility.