Mostly individuals decide what they will do, and then communities decide if they respect that or not. Doesn't exactly apply to companies tho, since they're functionally sociopaths.