What African Countries Can Learn from European Privacy Laws and Policies

By Edrine Wanyama |
The General Data Protection Regulation (GDPR) came into force in the European Union (EU) in May 2016. The 28 EU member states have until May 2018 to apply the Regulation to existing national laws to ensure the protection of citizens with regard to the processing of personal data and its transfer within the EU and beyond.
In Africa, only 14 countries (Angola, Benin, Burkina Faso, Mali, Gabon, Ghana, Ivory Coast, Lesotho, Madagascar, Morocco, Senegal, South Africa, Tunisia and Zimbabwe) have enacted data protection and privacy laws. Others, including Kenya, Niger, Nigeria, Tanzania and Uganda, have bills that are yet to be passed into law.
Whereas a continent-wide convention on Cyber Security and Personal Data protection was adopted by the African Union back in 2014, only eight countries (Benin, Chad, Congo, Guinea-Bissau, Mauritania, Sierra Leone, Sao Tome & Principe and Zambia) are signatories and only one (Senegal) has ratified the convention.
Meanwhile, as part of efforts to ensure data protection within the different regional blocs, the Southern African Development Community (SADC) has developed a model law on data protection while as of 2010, the Economic Community of West African States (ECOWAS) had the  Supplementary Act A/SA.1/01/10 on Personal Data Protection Within ECOWAS. Unlike its regional bloc counterparts in the south and west, the East African Community (EAC) has not adopted legislation on data protection and privacy – it only has a Framework for Cyberlaws which calls for member states to enact laws that protect personal data.
Meanwhile, some of the proposed and existing national laws fall short of comprehensively protecting data and privacy. For instance, Uganda’s Data Protection Bill, 2015 and Ghana’s Data Protection Act, 2012 lack succinct clauses on key areas such as notification of breach and data portability, and also have limitations on the right to access, among others. Despite this, mass collection of personal data continues across the continent, leaving the majority of Africans vulnerable to the violation of their data privacy.
This contrasting state of affairs formed part of the discussions at a July 2017 convening of lawyers, government officials, civil society representatives, academics, and students at the Institute for Information Law at the University of Amsterdam for a five-day training course on issues pertaining to privacy and data protection law relate to the internet and electronic communications.
For over 60 years, the European Convention on Human Rights (1950) has functioned as the framework to guarantee the right of privacy for private and family life. More recently, the European Charter of Fundamental Rights, 2000 has reinforced this right. These instruments are the basis of the robust protections provided for under the GDPR. In Africa similar frameworks which address privacy are less than 15 years old, such as the Declaration of Principles on Freedom of Expression in Africa (2002) (Part V), the  Resolution on the Right to Freedom of Information and Expression on the Internet in Africa – ACHPR/Res. 362(LIX) 2016, and the civil society led African Declaration on Internet Rights and Freedoms.
However, where European instruments have been largely endorsed and supported by member states, many African instruments still struggle to gain similar recognition by member states.  As in the EU, African countries need to uphold the principles laid down in these instruments towards the recognition and enforcement of citizens’ right to privacy and data protection.
Further, per the GDPR, European states are required to establish Data Protection Authorities (DPAs) to ensure that safeguards are in place to protect user data including across different jurisdictions. African states should embrace similar measures to guard against infringement on citizens’ privacy.

Data Protection Authorities are mandated to independently monitor, raise awareness, handle complaints and conduct investigations, among others, to uphold personal data protection.

Overall, the course highlighted the need for a robust privacy regime across the world to ensure that citizens enjoy due protection of their online data. It also highlighted the need for more efforts in citizen sensitisation on data protection and privacy alongside better frameworks in the African context to support these rights.
CIPESA participated in the course together with representatives from Ohio State Moritz College of Law and Capital University Law School; Global Privacy Practice, Covington & Burling; Institute for Information Law, University of Amsterdam; Berkeley Center for Law & Technology, UC Berkeley School of Law; Dutch Data Protection Authority; and the Washington University Law School, among others.
There are lessons for Africa to learn from the European experience, including the establishment of state and regional mechanisms that strengthen data protection frameworks. However, it is integral that more African countries enact data protection laws, and for countries that have with this law, it should be implemented with oversight from independent bodies as more user data is generated and stored online.
 
 

Promoting Youth Participation in Governance Through ICT in Kenya

By Tracy Kadesa |
Youths have emerged at the forefront of online activism and citizen journalism in Kenya. During a December 2016 to March 2017 strike by doctors, young doctors shared their grievances online, ranging from lack of resources in government hospitals to inadequate staffing and poor compensation. One of the stories was that of Dr. Ouma Oluga, the secretary general of the Kenya Medical Practitioners, Pharmacists and Dentists Union, who shared how he had to perform a caesarean section using a torch on his mobile phone due to a power outage. He was only 27 at the time.
Ahead of Kenya’s elections scheduled for August 2017, there have been increased calls for young Kenyans to participate in related processes and vote as a means of positively influencing concerns such as the high rates of unemployment. According to a 2016 World Bank report, Kenya has among the highest youth unemployment rates in Africa.
Against this background, on May 9-10, 2017, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) convened 30 youth and civil society activists to explore rights and responsibilities, as well as effective and secure ways to engage in the country’s governance processes including through ICT.
The workshop raised awareness about various ICT-based initiatives that have given Kenyan youths an opportunity to regularly discuss issues and analyse the manifestos of candidates running for elective posts. For instance, SiasaPlace runs weekly Twitter chats using #SiasaWednesday with the aim of amplifying women and youth voices. Siasa Place is a hub and co-working space that is passionate about engaging youth and women on civic agency.
Tribeless Youth is another vibrant movement that uses Twitter to engage youth in governance. Ongoing discussions facilitated by #TribelessYouth include #MeetTheNewCandidates where first-time political candidates, mostly youthful ones, are given an opportunity to present what they plan to deliver if elected come August.
Other youth-led initiatives that participated in the workshop included Fatuma’s Voice, a youth empowerment organisation, and Centre for Public Engagement & Social Economic Affairs Kenya (CPESEAK), which works on promoting youth participation in social accountability. Irungu Houghton of Society for International Development; Kenya Dialogues Project (KDP) participated as guest speaker and highlighted KDP’s commitment to advancing youth leadership in Kenya.
The workshop also explored government efforts to motivate the youth to participate in the August 2017 general elections through an initiative dubbed Y-VOTE (Youth Vote). The initiative spearheaded by the Independent Electoral and Boundaries Commission (IEBC) in partnership with the International Foundation for Electoral systems (IFES) leverages social media and on-ground activations to mobilise 18-29 year olds to vote come August 8. The campaign was launched on June 20, 2017 and run to late July.
Participants in the workshop explored ways of leveraging the various civic agency and elections-related initiatives to exercise their rights but also champion a peaceful electioneering period through online activism. Furthermore, discussions entailed digital safety tools and practices to facilitate secure communications.
The participants agreed that they were “no longer leaders of tomorrow but of today” and it was therefore their duty to zealously participate in governance processes towards improved livelihoods. See more insights in video below.

The youth in governance in Kenya workshop was organised in the context of the ICT4Democracy in East Africa initiative which is aimed at leveraging ICT to promote civic participation, democratic governance and respect for human rights.

CIPESA Engages Ugandan Members of Parliament on Implementation of Access to Information Law

By Loyce Kyogabirwe |
It is 12 years since Uganda passed an access to information law with the purpose of promoting transparency and accountability in all organs of the state by providing the public with timely, accessible and accurate information. The law also empowers the public to scrutinise and to participate in government decisions. However, the law has remained largely unimplemented as many Ministries, Departments and Agencies (MDAs) ignore citizens’ requests for information and rarely release information pro-actively, which contravenes the law.
“I have sent several information requests to the Ask Your Government (AYG) Uganda portal. It is now three months and I have never received any feedback,” said Cuthbert Abigaba, Member of Parliament (MP) for Kibaale county in Kamwenge district, while speaking at an engagement of Uganda’s MPs on implementing the Access to Information Act 2005. Organised by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) on July 13, 2017, the convening was a follow up on an earlier engagement with the MPs on their duties and responsibilities in enforcing the access to information law.
Section 43 of the Access to Information Act requires parliament to receive annual reports from each minister detailing all requests received from citizens for access to records or information, and indicating whether access was granted or not, and where access was not given, the reasons for the denial.
However, Parliament has never received any such reports, nor has it asked ministries to comply with this provision of the law. This issue was also raised earlier in April 2017 when CIPESA presented a position paper on the State of Access to Information in Uganda to MPs on the ICT Committee. The paper highlights some government initiatives to promote access to information, identifies gaps in the law, and makes recommendations for amendments to the law in order to enhance citizens’ access to information.
At the this month’s meeting, CIPESA presented to 16 MPs a comparative analysis of access to information legislation in East Africa and urged the lawmakers to pursue the proposed amendments so as to align Uganda’s law with progressive provisions in some of the East African Community (EAC) Member States’ laws, as well as to international human rights instruments.

 “While it is recognised that the EAC region is progressing in promoting the right to information, there are a number of issues that have bottlenecked citizens’ right to information. These include: lack of access to information by non-citizens in Uganda, Kenya and South Sudan; lack of ATI regulations in Rwanda, Kenya, Tanzania and South Sudan; lack of a clear definition of security information by Uganda; lack of provision for transferability of requests in South Sudan; limited scope of bodies the law applies to in Uganda; prohibitive access fees in Uganda, as well as the lack of clear complaints mechanisms in Uganda.” Comparative Analysis of Access to Information Legislation in Africa, June 2017.

During the meeting, the MPs expressed concern over insufficient knowledge among legislators about their duties and responsibilities under the law. They also noted that citizens were not sufficiently aware of their rights and the obligations of public officials. The legislators called for wider awareness raising to increase citizens’ demand for information. “If a Member of Parliament like me did not know the access to information law, what about the citizens who are not even educated?” said Rose Mutonyi, MP for Bubulo West, Manafwa district.
On the other hand, the MPs appreciated the recommendations and proposed amendments contained in the two position papers and suggested an action plan for meaningfully implementing the access to information law. Among the strategies put forward was to engage the Office of the Speaker of Parliament, sensitise more MPs to demand for annual reports from ministers, and engage ministers to submit the annual reports.
Nonetheless, the MPs cited the need for more capacity building on access to information for the majority of legislators to inform their discussions in parliament. As noted by Majegere Kyewalabye, MP for Bunya East, Mayuge district, “We need to be prepared more before we can go on the floor of parliament to present these issues.”
The engagement with MPs was organised by CIPESA in partnership with the Greater Parliamentary North Forum in the context of the ICT4Democracy in East Africa initiative’s objective to engage stakeholders on supportive policies and practices for human rights and democratic governance in East Africa.
 

Young Social Media Enthusiasts in Kenya Trained on Internet Law and Digital Security

By Shitemi Khamadi |
In 2015, Allan Wadi, became the first Kenyan to be convicted of hate speech online. At a May 2017 training on internet and the law, he expressed gratitude for the opportunity to acquire skills and knowledge to avoid future arrest and prosecution. While he is currently facing an incitement to violence charge over a comment he made on Facebook in February 2016, he said he is now more aware of the extent of his rights and limitations with respect to the rights of others.
Wadi is however convinced that the various charges brought against him were unfair as many others who have made similar and according to him, graver comments online have gone unpunished. “I feel it was to set me as an example”, he remarked at the end of the training in Kisumu where 43 other youth including technology enthusiasts, communications students and bloggers were trained in the legal frameworks governing use of the internet in Kenya.

See: Allan Wadi Feels Arrests and Charges are Unfair

The objective of the training hosted by the Bloggers Association of Kenya (BAKE) in partnership with the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) was to build participants’ understanding of rights and offenses related to the internet within the Kenyan legal context. The training was organized in light of shrinking rights of Kenya’s digital citizens in the face of new restrictive laws and increased arraignment of individuals for expressing online opinions which authorities deem in breach of the law, especially given the upcoming electioneering period.

Bake2

Prior to the Kisumu training, a similar training was held in Nairobi where a Senior Prosecutor in the office of the Director of Public Prosecutions (DPP), Duncan Ondimu, was unequivocal that his office would be more vigilant on hate speech cases online, arrest any perpetrator and charge them in court. “We will not spare anyone,” said Ondimu who also serves as the Senior Prosecution Counsel. He added that the DDP had set up a 24 hour toll free line to for citizens to report hate speech offenses from social media posts that the office would follow up with investigations. Kenyans can also report offences to the DPP on Facebook and Twitter.

Furthermore, Ondimu stated that while the country had made gains in removing clauses in various laws that limited freedom of expression, provisions relating to defamation still exist. In 2016, Section 29 of the Kenya Information and Communications Act, Section 194 of the Penal Code and Section 132 of the Penal code were declared unconstitutional.

Nonetheless, a key concern among participants in the two trainings was user safety online. In particular, combating harassment, stalking and cyber bullying especially against women. Digital security trainer Ephraim Muchemi took participants through communications and device protection practices including strong passwords, anti viruses, encryption (email and hard disk) and privacy settings on social media accounts.

Mr. Wadi challenged the bloggers and social media users to become the main source of information even for the mainstream media in documenting events during the election. “You should also act like observers and update electorates of the voting and tallying processes from various tallying centres”, he asserted.

He also urged BAKE and similar actors to continue with capacity building efforts aimed at empowering bloggers and social media activists, as well as supporting them during litigation over offences.

The trainings were organized in the context of the ICT4Democracy in East Africa initiative as part of efforts to promote ICT enabled participation in governance pre and post elections in Kenya.

Youth in the Civic and Social Tech Arena in Tanzania

By Ashnah Kalemera |
Sandra Kitenge, a student of Mbezi High School, is determined to bridge the gender gap in technology in Tanzania. Having benefited from the Apps and Girls programme that empowers girls with computer literacy and coding-for-change skills, she sought avenues through which she could contribute to amplifying grassroots voices as part of electoral processes in Tanzania. The solution: an idea for a mobile app known as Tujibu (Swahili for “answer us”) through which grassroots communities can interact with leaders on their manifestos so they can make informed election decisions.
Alongside her studies, Sandra has since 2015 conceptualised her idea and last May finalised the web interpretation for the app. Currently, she is working on the hosting for the app and hopes to have a prototype by September.
“The app will help leaders know the needs of their people and promote accountability in fulfilment of pledges,” she says.
Tujibu was among four technology tools presented at the first Civic and Social Tech in East Africa showcase  hosted by CIPESA in partnership with Buni Innovation Hub in Dar es Salaam, Tanzania on June 16.
Another tool showcased at the event was KodiYangu, a website on tracking the utilisation of tax funds in Tanzania. Currently in prototype stage, the website is expected to enable citizens to give feedback on priority areas for budget allocations and also inform relevant advocacy and awareness raising initiatives. KodiYangu is being incubated by the Hatua Project, an initiative for catalysing citizen engagement and innovation.


Also showcased was Changia, a mobile-based platform under development by the youth-led Tujenge software development company. The app, currently in testing phase, is aimed at community fundraising at local government level for health, water, and infrastructure challenges. Through the platform, duty bearers are able to fundraise for identified community concerns and citizens are also able to hold the leaders to account for funds collected.
Meanwhile, the web-based Platform for Youth and Policy Exchange (PYPE) will be aimed at promoting awareness and engagement among youths on policy issues. Using interactive online media and tools, PYPE will maintain a policy database on various sectors and conduct polls on specific youth policy issues.
“Youths can only effectively engage in governance if they are aware of the policies relevant to them and are able to follow up on implementation,” says Farhan Yusuf, a member of the PYPE developer team. An official from the Tanzania Policy Dialogue pledged to work with PYPE on policy analysis and advocacy following the Yusuf’s presentation at the showcase.
According to various developers, an ongoing challenge for social and civic tech innovation in Tanzania is the limited availability of information. Edwin Paul of KodiYangu says that, for the tax revenue and budget allocations, the latest figures they were working with were for the 2013/2014 financial year. “We don’t have access to the figures for the following years,” he adds. Nonetheless, developers hope that implementation of the recently passed Tanzania Access to Information Act, 2016 may help in making information more widely availability.

See this on the Right to Information in Tanzania: Insights on the Laws, Policies andPractices

Other challenges that Tanzanian developers face include high levels of illiteracy and low incentives for adoption of civic tech tools by duty bearers and citizens. Moreover, given ongoing cyber security challenges, participants at the tools showcase urged developers to make ensure their platforms have strong security provisions to safeguard against hackers, filter spam, and secure users’ information.


A panel comprising of representatives from the United Nations Association of Tanzania, the Forum for Climate Change Tanzania, Open Society Initiative East Africa (OSIEA) Tanzania office, the Tanzania Bora Initiative and Jamii Forums also discussed the impact of civic tech on engagements between citizens and duty bearers, as well as on improved governance in Tanzania. The panellists  noted that application of technology in their respective work had helped bridge the communication gap between citizens, duty bearers and civil society, especially in rural communities. Further, technology had enhanced access to information, citizens’ participation in decision-making processes, and government responsiveness to citizens’ concerns.
However, the panellists noted that awareness of civic duties remained low, supporting infrastructure such as electricity was a challenge, and there was limited research to inform the design and implementation of technology within their interventions. They urged developers to leverage mainstream and online media, as well as physical engagements, to complement their tools.
Finally, there was also a call for more support – funding and mentoring – for young innovators in civic tech and setting up of a “governance hub” to bring together tech and governance stakeholders to innovate and incubate ideas whilst avoiding duplication of efforts.
For her part, Sandra applauds the support she has received from mentors including the team at Apps and Girls, Buni and Niwezeshe Lab. She admits, however, that working on Tujibu whilst still in school is a challenge.
The June 16 tech showcase  was the first in a series of civic and social tech in East Africa engagements organised by CIPESA as part of the ICT4Democracy in East Africa initiative. The next event is scheduled to take place in July 2017 at Outbox hub in Kampala, Uganda.