Will Our Human Rights and Freedoms and a Free and Open Internet be the Next Victims of Cybercrime?

Manifesto Launch |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) has joined civil society organisations and industry in a rally against the potential threat of cybercrime on human rights and freedoms as well as the open internet.

Day-by-day the effects of cybercrime continue to get worse. Although something clearly needs to be done, there is growing concern that any efforts to tackle this modern scourge come at the expense of fundamental human rights and that they threaten the open and free internet.

As countries are considering their input to the United Nations ahead of the scheduled January negotiations on a Cybercrime Convention, the CyberPeace Institute and the Cybersecurity Tech Accord have brought together a range of stakeholders to publish the Multistakeholder Manifesto on Cybercrime. The principles outlined in the Manifesto should be at the heart of any cybercrime legislation and to guide the negotiating process.

The Manifesto is supported by over 50 members of civil society, industry organizations (such as the Center for Democracy and Technology, World Wide Web Foundation, Cyber Threat Alliance, and Derechos Digitales) and individuals. Signatories to the Manifesto want to also ensure that any cybercrime convention preserves and upholds basic human rights and freedoms guaranteed under existing international UN and other treaties.

“Today, industry and civil society are coming together through a Multi-Stakeholder Manifesto on Cybercrime which provides a set of principles to guide governments in their negotiations at the United Nations” says Klara Jordan, Chief Policy Officer at the CyberPeace Institute. 

In the build up to the convention negotiations, this Manifesto is an urgent appeal to all UN member states, UN agencies, and others involved in the current process, to address concerns regarding the draft and align their submissions with the Manifesto.

The Manifesto also highlights the importance of ensuring cybercrime perpetrators are held accountable for their actions: “In an area as opaque as cyberspace, public-private partnerships are often an indispensable tool to gain insights into evolving cyber threats and those behind them,” said Annalaura Gallo, Head of Secretariat, Cybersecurity Tech Accord. “A new Cybercrime Convention should establish clear mechanisms for states to reduce the operating space for criminals,” added Annalaura Gallo

The Manifesto also tackles the challenges inherent in the current UN process, in particular the lack of multistakeholder participation. “We are concerned about the lack of consultation, inclusion and involvement of stakeholders from across civil society and industry”, said Klara Jordan, adding: “The participation of civil society entities is crucial to ensure that the impact of these crimes on society is properly taken into account.” “The technology industry is ready to offer its expertise and input to UN states in the upcoming negotiations on cybercrime. We hope that our input will be sought more consistently than has been the case in the past in discussions involving the security of our internet ecosystem,” emphasized Annalaura Gallo.

*********

About the CyberPeace Institute: Headquartered in Geneva, Switzerland, the CyberPeace Institute is a nongovernmental organization whose mission is to reduce the harms from cyberattacks on people’s lives worldwide, provide assistance to vulnerable communities and call for responsible cyber behaviour, accountability and cyberpeace.

About the Cybersecurity Tech Accord: The Cybersecurity Tech Accord is a coalition of over 150 technology companies committed to advancing peace and security in cyberspace. The group’s mission revolves around four foundational principles: strong defense, no offense, capacity building and collective response.

How State Surveillance is Stifling Democratic Participation in Africa: State of Internet Freedom in Africa Study Findings

FIFAfrica21 |

As African countries embrace digital technologies, there is growing concern that the rising state surveillance, which is partly being enabled by the same digital technologies, is undermining African citizens’ digital rights and hindering their willingness to meaningfully participate in democratic processes.

One of the “democratising effects” of the internet was that it had provided a safe and alternative engagement platform that could help circumvent and diminish the repressive state’s control over the means of communication, thereby enabling greater organising and expression of dissenting opinions. However, autocrats in the region have appropriated the power of digital technologies to stifle dissent and to ramp up their capabilities to snoop on, punish, and silence critical and dissenting forces.

According to the 2021 State of Internet Freedom in Africa report by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA),  surveillance has become a principal threat to digital rights in Africa, a weakening force to civil society and independent voices, and ultimately a driver of authoritarianism. The study maps the prevalent forms of surveillance, the laws that aid surveillance, and the impact of state surveillance on the ability of individuals and organisations to organise, mobilise, and engage in democratic processes.

Both physical surveillance and digital surveillance have for several years been prevalent in the countries studied. However, the study shows that  digital surveillance is expanding in scope, with several countries now deploying spyware, drones, and video surveillance (CCTV), as well as social media monitoring, mobile phone location tracking, and the hacking of mobile phones, messaging, and email applications.

The abuse of surveillance is rife in countries with high levels of impunity for rights violations and a low level of accountability for the actions of the government and its institutions. In virtually all countries studied, not only has surveillance become commonplace but the right to communicate anonymously in digital spaces has been profoundly eroded through mandatory SIM card registration and creation of inter-linked databases for national ID, voters’ registers, and other services provisions.

Government critics including leading opposition leaders, human rights defenders and activists who do human rights and governance work, as well as investigative journalists, remain prominent targets of state surveillance.

Enablers of State Surveillance

Many countries have enacted various laws that permit surveillance, mandate telecommunication intermediaries to facilitate the interception of communication, stipulate the mandatory collection of biometric data, limit the use of encryption, require the “localisation” of personal data, and grant law enforcement agents broad search and seizure powers.

In countries such as Chad, Malawi, Senegal, Tanzania, Tunisia and Zambia, laws prohibit offering encryption services without licensing, and in other cases, encryption service providers are required to decrypt any encrypted information that they hold to aid lawful interception. Moreover, while all countries have laws that facilitate lawful surveillance, many of these laws have pervasive flaws, are partially implemented, indiscriminately applied, and widely abused.

While democratic participation is based on free will and freedom, the study found that the law has been instrumentalised in many countries including Uganda, Rwanda, Nigeria, Ghana, and Tanzania, to intimidate and to carry out arbitrary arrests and detention, prosecution, and persecution of individuals. The limited oversight over surveillance activity, where the actions of those who conduct illegal surveillance remain shrouded in secrecy with limited accountability for their actions, or redress for victims of surveillance, remains of concern.

Impact on Democratic Participation

The overreach effect of increased surveillance across the region is the curtailment of rights to freedom of expression, access to information, association and assembly, and diminished appetite for participation in democratic processes.

Undermining the Right to Freedom of Expression and Access to Information

The rights to freedom of expression and access to information are critical to meaningful democratic participation and civic engagement. The inability to freely express oneself has a direct impact on democratic participation since it limits an individual’s engagement in political discussions and the capacity to influence others, especially during periods of political contestation, as well as limiting engagement in civic spaces.

The fear of repercussions associated with surveillance curtails the rights of individuals who have been victims of surveillance to freely express themselves. The study shows that this fear has forced human rights defenders, activists, government critics and journalists into self-censorship, to be less vocal, and to limit expression of their opinions especially on debates on political affairs.

Infringing on the Right to Privacy of Communications

Surveillance intrudes on the privacy of individuals and  has become a means through which fear is instilled in political activists, the opposition, HRDs and the public. According to the United Nations High Commissioner for Human Rights, the right to privacy is not only impacted by the examination or use of information about a person by a human or an algorithm.  Rather, even the mere generation and collection of data relating to a person’s identity, family or life already affects the right to privacy, as through those steps an individual loses some control over information that could put his or her privacy at risk.

Overall, surveillance has  undermined the ability of democracy actors to use digital communication channels – some have stopped using the channels to communicate altogether or have restricted their communications. Further, it has increased their costs on communication and operations generally..

Curtailing Freedom of Assembly and Association

The right to freedom of assembly and association is intricately linked to the rights and ability to freely express oneself, seek information, and mobilise. The curtailment of these freedoms can be felt in the individuals’ withdrawal from active engagements with peers, their representatives to parliament and other political actors. The study shows that the rights to assembly and association have been limited for victims of state surveillance and other democracy actors.

The study found that victims of surveillance and those who closely work with or associate with them, tended to take an overly cautious approach due to fear of repercussions such as being arbitrarily arrested, prosecuted, and detained.

The ability to organise and mobilise for activities, especially political meetings, is among the aspects that have been adversely affected by state surveillance. Some actors have resorted to organising meetings online as opposed to physically, and only with trusted individuals, which has affected the reach and effectiveness of such meetings and the mobilising power of such actors.

Effect on the Work of Organisations

According to the report, state surveillance has adversely affected  the work of organisations, making it difficult for them to achieve their goals including gathering information and mobilising for activities. Some organisations  were affected by disruptions of their activities, including being evicted from their offices by landlords at the request of state officials.

In addition, the costs of running the organisations had gone up, due to the level of financial investments made towards implementing safety and security measures. Organisation staff  lost precious energy and time worrying about surveillance, and felt controlled and less free in undertaking their work. Some organisations scaled down their work especially on governance issues.

Impact on Personal Life and Relations

The impact of surveillance goes beyond affecting peoples’ ability to meaningfully participate in democratic processes, to their personal life and relations. Individuals who were targets of state surveillance had relationships with their family, friends and society affected. Many of them lamented their lack of a social life as they could no longer make new friends, visit their old friends or family members, invite them to their homes, or be seen with them in public.

The research found widespread fear among the respondents, including their families, friends, and colleagues because of the surveillance they had experienced, or due to the apprehension of ongoing or future surveillance. Surveillance of their communication, lives and work had affected their psychological well-being and mental health in various ways. The mental toll of surveillance had resulted in constant and increased feelings of anxiety, anguish, stress, worry, depression, paranoia, fear, isolation, danger, risk, hurt, and insecurity.

There was widespread fear among respondents of repercussions for expressing opinions, in the form of  threats, harassment, arrest, attacks, abduction, detention, prosecution, death, and making their family, friends and associates targets of state action.

The study makes the following key recommendations:

  1. Governments should repeal, amend or review existing laws, policies and practices on surveillance, interception of communication, biometric data collection, and limitations on the use of encryption to ensure  compliance with the established international minimum standards on human rights and communications surveillance.
  2. Judiciaries and Parliaments need to proactively check the excesses of the state and its agencies in surveillance to ensure accountability and transparency of the executive arms of government.
  3. Civil society organisations (CSOs) should continue to investigate, document, and expose data and privacy breaches such as unauthorised access, surveillance and non-compliance by data collectors, controllers and processors.
  4. CSOs should engage in strategic public interest litigation through collaborative efforts to challenge laws, measures and acts that violate privacy rights and push for policies and practices reforms that uphold privacy.
  5. Organisations under threat of surveillance should enhance their internal digital capacity and build capacity of their staff in digital literacy, cyber hygiene, physical and digital security and data protection measures; and how to manage new surveillance measures and other emerging threats to digital rights.
  6. Intermediaries should regularly publish, update and widely disseminate privacy policies and transparency reports and inform users about the collection, use, handling, sharing and retention of their data and the measures taken to protect their right to privacy.

FIFAfrica21: Tackling Cybersecurity on the African continent

FIFAfrica21 |

EU Cyber Direct will on September 29, 2021 convene a session on Africa and the Future of International Cybercrime Cooperation as part of the eighth edition of the Forum on Internet Freedom in Africa (FIFAfrica).

According to the Africa Center, African governments face a fast-evolving array of digital threats including espionage, critical infrastructure sabotage and organised crime. The attacks come from a broad range of actors including lone-wolf hackers and criminal syndicates through to foreign governments. Reports indicate that the Covid-19 pandemic has accelerated digitisation on the continent leading to cybercriminals stepping up attacks given the limitations on security infrastructure and capacity, with financial institutions  and telecom companies in particular suffering huge losses.

The estimated economic cost of cybercrime in Africa is USD3.5 billion, and it affects the livelihoods and well-being of millions of people, businesses and communities annually. Due to the global footprint that defines cybercrime, there is a shared transnational responsibility that requires international cooperation and coordination to address the phenomenon. While the United Nations Third Committee has initiated a process mandated with elaborating an international convention on cybercrime, many states are still struggling to understand how this new process fits within existing efforts and what their position should be.

The EU Cyber Direct session will work to identify the priorities of African countries for the upcoming negotiations. The session will also brainstorm on how African stakeholders can contribute to the planned negotiation process, and the role African civil society organisations can play in this process.

As part of efforts to combat cybercrime in Africa, the African Union under its Agenda 2063 that was adopted in 2014 recognises cybersecurity as a key priority to ensure that new technologies are used for the good and prosperity of individuals and institutions on the continent. The session is thus timely and will bring synergies to the other on-going efforts towards a more secure cyberspace on the African continent.

The speaker line up includes representatives from Chatham House, Swansea University, Cyber Peace Institute, and the Zambia Police Service.

FIFAfrica convenes various stakeholders from the internet governance and online rights arenas in Africa and beyond to deliberate on gaps, concerns and opportunities for advancing privacy, access to information, free expression, non-discrimination and the free flow of information online. This year’s forum, which runs from September 27 to 30 2021, is hosted by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) with support from Ford Foundation, Sigrid Rausing Trust (SRT), Omidyar Network, Small Media, Internews, the European Union Institute for Security Studies (EU ISS), and the Slovenian Presidency of the Council of the European Union.

Registration for FIFAfrica21 remains open.

#FIFAfrica21: Deliberating Europe-Africa Digital Rights Cooperation

FIFAfrica21

As a supporter of the upcoming Forum on Internet Freedom in Africa 2021 (FIFAfrica21), the Slovenian Presidency of the Council of the European Union (EU) will seek to enhance digital rights cooperation between Africa and Europe.

Ambassador Tadej Rupel, Ministry of Foreign Affairs of Slovenia, Presidency of the Council of European Union 2021, will be part of a keynote panel to kick off FIFAfrica21 on September 28, 2021. Others on the panel are journalist and writer Samira Sawlani, Cameroonian lawyer and activist Michelle Ndoki, and Chief Executive Officer of the Pan African Lawyers Union (PALU), Donald Deya. The panel will put a spotlight on the various dynamics that have come to shape digital rights in Africa in addition to also sharing insights on the path that should be taken towards an inclusive, safe and secure internet in Africa. Ambassador Rupel will speak about Slovenia’s digital rights in Africa engagement as part of the EU and in its national capacity.

Meanwhile, the Slovenia-based International Research Centre on Artificial Intelligence (IRCAI) under the auspices of the United Nations Educational, Scientific and Cultural Organisation (UNESCO) and its partner Knowledge 4 All Foundation will host a roundtable on the intersection of African languages and Artificial Intelligence (AI). The session, scheduled to take place on September 29, 2021 starting at 16:30 East African time, will discuss the importance of linguistic and cultural diversity in the digital era. It will also discuss the need to leverage collaborations between AI research communities, policy makers and investors, as well as bilateral cooperation between the African Union and the EU, in order to harvest the benefits offered by Language Technology for realising digital rights in Africa.

The roundtable will highlight ongoing efforts by Masakhane (supported by the Lacuna Fund), which consists of 140 contributors from 17 African countries, focused on the preservation of African languages in the information society. The session will also showcase AI projects with interdisciplinary teams of researchers that have created openly accessible text and speech datasets that will fuel Natural Language Processing (NLP) technologies in nine languages across 22 countries.

The roundtable is part of a series of global events organised by the Ministry of Foreign Affairs of the Republic of Slovenia and IRCAI in cooperation with Slovenian embassies and other permanent representatives in 12 countries around the world to garner interest in urgent and global responses to the emerging field of AI. The first event was held in London, United Kingdom on AI and decarbonization.

Speakers during the roundtable will include representatives from Bayero University, Kano-Nigeria; Uganda’s Makerere University; Maskhane; and IRCAI.

Register for the Forum here.

Forum on Internet Freedom in Africa 2021 (#FIFAfrica21) Opens For Registration

#FIFAfrica21 |

On September 28-30, 2021 the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) will host the eighth edition of the Forum on Internet Freedom in Africa (#FIFAfrica21). Now in its second year as a hybrid pan-African and global event, the Forum has grown to inform best practice on digital rights protection in Africa. Further, it serves as a platform for deliberation on gaps, concerns and opportunities for advancing privacy, free expression, non-discrimination and the free flow of information online.

This year, FIFAfrica will feature three main tracks –  Access to Information, Digital Inclusion, and Key Trends shaping digital rights in Africa – which will interrogate the deeper facets of internet freedom in the Sub-Saharan Africa context. The sub-themes will include Covid-19 responses, data governance, data privacy, media literacy, misinformation and disinformation, content regulation, internet shutdowns, online violence against women, digital identity, technology and persons with disabilities. The tracks will also feature emerging trends such as shifts in the weaponisation of the internet, new digital rights tools, as well as recent changes in technology laws and regulations.

Keeping in stride with last year’s Forum, the hybrid FIFAfrica21 will incorporate physical engagements in select African countries with strict adherence to Covid-19 Standard Operating Procedures (SOPs).

A key pillar of FIFAfrica is the opportunity it provides for a diverse audience including veterans in the digital rights arena through to fledgling digital rights enthusiasts to engage with each other in a shared space on a diversity of interests and concerns. Participants at the Forum include African policymakers, regulators, human rights defenders, academia, technologists, law enforcement representatives, and the media, who are all committed towards advancing digital rights in Africa and promoting the multi-stakeholder model of internet governance.

Over the years, highlights at FIFAfrica have come to include launches of platforms and reports, showcasing of new tools and advocacy ideas as well as a dedicated digital security advisory and support team.

Register here to gain access to the online venue as well as to the broader community who will be participating at the Forum. The online venue will also allow #FIFAfrica21 attendees to  book their seats for sessions of interest, and engage with other attendees.