Uganda: CIPESA Submits Comments on the Computer Misuse (Amendment) Bill, 2022 to Parliament

By Edrine Wanyama |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) has made a submission on emerging concerns from the proposed Computer Misuse (Amendment) Bill, 2022 (the Bill) to the Parliamentary Committee on Information and Communications Technology. In its submission, CIPESA analyses the changes proposed by the Bill which are a blow to online civil liberties in Uganda.

The private members Bill is seeking to amend the Computer Misuse Act of 2011and  argues that existing laws “do not specifically address regulation of information sharing on social media” or are “not adequate to deter the vice”. The objectives of the amendment are: to enhance the provisions on unauthorised access to information or data; prohibit the sharing of any information relating to a child without authorisation from a parent or guardian; prohibit the sending or sharing of information that promotes hate speech; prohibit the sending or sharing of false, malicious and unsolicited information; and to restrict persons convicted of any offence under the Computer Misuse law from holding public office for a period of 10 years.

While the amendment could be justified by advancements in technology, upsurge in cybercrime, disinformation, and hate speech (clause 4), experience has shown that the law since enactment has been used to suppress digital rights including free expression and access to information.

The underlying provisions of the bill including clause 5 which seeks to prohibit the sending or sharing of unsolicited information through a computer, and clause 6 on prohibition of sharing malicious or misleading information, could be misused and abused by the government and its agencies to curtail sharing and dissemination of information, which would limit freedom of expression and access to information. Moreover, such restriction would counter the ruling by Supreme Court in Charles Onyango Obbo and Another v Attorney General that the penalisation of the publication of false news under Section 50 of the Penal Code is unconstitutional.

The Bill also duplicates existing laws including the Regulation of Interception of Communications Act, 2010 and Data Protection and Privacy Act in as far as it relates to unlawful interception of communications and unlawful access to and sharing of personal information under clause 2 and  prohibition of processing and sharing information about children under clause 2.

Similarly, the Bill proposes the adoption of very punitive and prohibitive penalties which could not only hinder expression and access to information but also transparency and accountability in governance. The penalties proposed stretch to UGX 15 million (USD 3,900), imprisonment not exceeding 10 years, or both for unauthorised access, interception, recording and sharing of information under clause 2. On the other hand, sharing information related to children (clause 3), hate speech (clause 4), unsolicited information (clause 5) and misleading or malicious information (clause 6) are punished with imprisonment not exceeding seven years.

While specifically targeting leaders, Clause 7 of the Bill seeks to bar persons convicted under the Computer Misuse Act from holding public office for a period of 10 years, and to further dismiss convicted personsfrom public offices that they were holding.  In addition to the restrictions under the  Official Secrets Act  it may discourage the disclosure of information by duty bearers where such disclosure would be necessary for enforcing transparency and accountability.

The Computer Misuse Act has been previously used to suppress digital rights including free expression and access to information. For instance, academic and social critic Dr. Stella Nyanzi was arrested for insulting the president in a social media post. In 2019, she was convicted of cyber harassment contrary to section 24 of the Act but acquitted of offensive communications, which is proscribed under section 25. Other individuals who have suffered the wrath of the same law include former presidential aspirant Henry Tumukunde who was arrested over alleged treasonable utterances in radio and television interviews, the Bizonto comedy group who were arrested over alleged offensive and sectarian posts, and author Kakwenza Rukirabashaija who was arrested, detained and prosecuted over offensive communication against the president and his son.

While the need for amendment of the Computer Misuse Act might be eminent to address emerging technologies, the proposed provisions are unfounded and redundant, and stipulate highly punitive penalties. They fail to address existing retrogressive provisions including section 24 on cyber harassment and section 25 on offensive communication, which have been used to criminalise freedom of expression. Moreover, trolling, cyber harassment, unauthorised sharing of intimate images, and other forms of online violence against women and girls are not addressed.

Read CIPESA’s full submission!

How the ADRF is Building Capacity and Traction for Digital Rights Advocacy in Africa

By Apolo Kakaire |

Three years since it was launched and with USD 649,000 disbursed to 52 beneficiaries across 39 African countries, the Africa Digital Rights Fund (ADRF) is powering digital rights policy advocacy and engagement across the continent. According to several beneficiaries, the ADRF is a unique funding initiative that has broken ranks with traditional funders’ structures, and to considerable effect.

The Fund is lauded for adopting a simple application process, allowing for flexibility in implementation, breaking barriers for little-known actors, enabling grantees to build on previous initiatives to ensure greater reach and impact, and supporting local context-specific and responsive projects. This, according to grantees and collaborators who were part of a June 2022 virtual convening on ADRF advocacy experiences which was aimed at promoting learning and best practice.

The ADRF was launched in April 2019 in recognition of the growing role of technology in fostering democracy and promoting equity on the African continent amidst rising arrests of activists, network disruptions in several countries, and restrictive legislation that stifled innovation and human rights online. Moreover, assessments at the time had found that many digital rights interventions were limited in scope, thinly spread across the continent, faced resource limitations, and were often inconsistent in their engagement with digital rights work. 

“The situation called for partnerships to bring together different competences to advance digital rights on the continent through seed funding,” said Ashnah Kalemera, the Programme Manager at the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), the administrators of the ADRF.  Those partnerships required provision of flexible and rapid response funding to a range of entities that did not have the ability to attract funding from traditional funders, who have stringent application requirements and lengthy grant application processing times. 

With grants ranging between USD 1,000 and USD 20,000,  ADRF beneficiaries have undertaken various initiatives focused on technology in society, the public and private sectors. Besides the funding, grantees have also received capacity building in data-driven advocacy and impact communication and media relations. Across the continent, the Fund has helped to strengthen capacity in evidence-based research, collaborative advocacy and impactful policy engagements responsive to regulatory and practice developments that affect the internet freedom landscape.

At the June convening, select initiatives in Kenya, Namibia and Somalia supported by the Fund shared their advocacy experiences. In Somalia, the ADRF-supported work of Digital Shelter has seen a major breakthrough in stakeholder dialogue and engagement on hitherto undiscussed digital rights subjects such as digital inclusion, online civic space, gender-based violence online, digital entrepreneurship, civic participation and data protection and privacy

“Prior to ADRF’s support, people in the country had no appreciation for digital rights and the consequences of internet shutdowns. The Fund helped us to engage the government to talk about policies and legislation and when the conversation started, the Minister [of Communications and Technology] was very open and he was surprised that there was a local group addressing these issues,” said Ayaan Khalif, Co-founder of Digital Shelter. “The ADRF was an eye opener and helped us partner and link with other organisations and to understand what works in other countries.” 

Aayan added that applying for the ADRF funding was an easy process. She said: “We were almost giving up on donor funding after so many rejections. The ADRF process was simple. Some donors complicate things. The [application templates] are in English but sometimes it is as if it is in another language.”

The inroads made by Digital Shelter underscore the importance of collaboration and partnership in advancing digital rights in the region. Zakarie Ismael, the eGovernment Implementation Advisor in Somali’s Ministry of Communications and Technology, stated that the government of Somalia, through the ministry has responded to the appeals of Digital Shelter and other actors by prioritising the technology sector, including through the ICT Policy and Strategy 2019-2024. That government responsiveness has been crucial to the work of digital rights activists. As Ayaan noted, “It makes it easy to make inroads when you have people backing you up in policy advocacy. Our partnership with the government has been very practical in this regard.”.

As legislative and oversight bodies, national parliaments have a key role in advancing  digital inclusion and rights-respecting digital policies and practices. Indeed, some grantees, including Mzalendo Trust in Kenya, have dedicated efforts to promoting citizen-parliamentary engagement on digital rights. With the suspension of parliamentary proceedings in Kenya at the height of the Covid-19 pandemic, the ADRF supported functionality upgrades to the Dokeza and Bonga Na Mzalendo platforms. The upgrades enabled citizen participation through remote annotation and submission of memoranda on bills including on the controversial Huduma Initiative

Mzalendo Trust has also worked to promote an inclusive digital economy in Kenya. Like Ayaan, Slyvia Katua, a Programme Officer at Mzalendo Trust, lauded the ADRF for using a simple and straightforward application process. “The application requires you to outline what issues you are targeting, what solutions you offer and what impact you foresee,” she said. 

Meanwhile, Josephat Vijanda Tjiho, from the Internet Society (ISOC) Namibia Chapter, appreciated the ADRF grant process for allowing them to build from one project to another. “We organised forums on digital media and elections, then stepped up to privacy and data protection especially around the Covid-19 pandemic and thereafter a campaign against online violence against women and children. Our ideas [which the ADRF supported] were building from one to the other and this made our application process quite smooth,” Tjiho said. 

ISOC Namibia conducted research and convened engagements with different stakeholders on data protection, gender-based violence online and access to information. “Based on our engagements, the Namibia Access to Information (ATI) Act was passed in June 2022 and this was partly made possible through support from the ADRF,” stated Tijho. For its campaign against gender-based violence, ISOC Namibia successfully collaborated with prominent personalities including a technologist, musician and pageant as part of the 16 Days of Activism Against Gender-Based Violence. The campaign fed directly into work on research and workshops on gender-based violence in the Southern African Development Community (SADC) region for which ISOC Namibia partnered with CIPESA, Meta, Pollicy, Genderlinks and University of Pretoria Centre for Human Rights.

According to Neema Lugangira, a Member of Parliament (MP) in Tanzania, undertaking digital rights advocacy without involving parliament has created huge gaps in ensuring that policy and legislation around digital rights are rights-respecting and are effectively implemented. She faulted civil society organisations seeking policy reforms for concentrating on other arms of the government and ignoring parliaments yet they play a key role in policy formulation and oversight. She urged ADRF grantees and other digital rights actors to actively engage MPs as part of their programming. “We should prioritise capacity building for MPs because they are ignorant about digital rights,” said Lugangira.

The experiences of ADRF grantees indicate the potential of rapid response and flexible funding in positively shaping the digital rights landscape in Africa through targeted research, advocacy and movement building.

Kenya’s 2022 Political Sphere Overwhelmed by Disinformation

Ahead of the August 9, 2022, general elections, Kenya has been hit by a deluge of disinformation, which is fanning hate speech, threatening electoral integrity, and is expected to persist well beyond the polls. Last month, the Kenya ICT Action Network (KICTANet) and CIPESA convened stakeholders in Nairobi to disseminate the findings of research on the nature, pathways, and effects of disinformation in the lead-up to the election, and the actions required to combat disinformation. Below is a summary of the report findings and takeaways from the dissemination event, as captured by KICTANet:

There is a lot of strange information going on around the country, and this has been happening for a while. During the Kenya Internet Governance Forum (IGF) week, the Kenya ICT Action Network (KICTANet) in partnership with the Collaboration on International ICT Policy in East and Southern Africa (CIPESA) held a workshop to disseminate a report on  Disinformation in Kenya’s Political Sphere: Actors, Pathways and Effects. The research is part of a regional study conducted by CIPESA, that explores the nature, perpetrators, and effects of misinformation in Cameroon, Ethiopia, Uganda, Nigeria, and Kenya.

As Kenya nears the 2022 general elections, disinformation remains at its peak levels, both at grassroots and national levels. The availability of sophisticated technology and its ease of use has enabled a wide range of political actors to act as originators and spreaders of disinformation.

Currently, there is no law that clearly defines or distinguishes between misinformation and disinformation. However, it is an offense to deliberately create and spread false or misleading information in the country. False publications and the publication of false information are punishable under the Computer Misuse and Cyber Crimes Act under Sections 22 and 23. It is a crime to relay false information with the intent that such information is viewed as true, with or without monetary gain. However, these same laws can also be used to silence dissent, making it a double-edged sword.

The study identifies different forms of disinformation that take place both physically and online. They include deep fakes, text messages, WhatsApp messages, and physical copies such as pamphlets and fliers. These are spread through the use of keyboard armies on social media, where politicians up to the grassroots levels hire influencers, and content creators who spread messages around them or against their opponents. This is done through mass brigading and document and content manipulation. The rationale is driven by the desire to get ahead politically or economically and is fuelled by an ecosystem that is fertile for the spread of this vice.

According to Safaricom, in the year 2017, 50% of its communications department time was spent monitoring fraud and fake information at different times. The instigators of this disinformation are influencers, politicians themselves, people they work with, and their parties.

There is a flow to how the fake news gets to the audience, and disinformation does not start with the pictures but with a plan that is part of a bigger political strategy. It starts with identifying the target audience, choosing the personnel and people to push the message, and then narrative development is done. This is followed by content development, which includes videos, pictures or memes, and audio files. Once this is done, the content is then strategically released to the unknowing public, who, without critically analyzing the information, spread it far and wide to a wider audience. This results in diminished trust in democratic and political institutions and restricted access to reliable and diverse information.

This can be addressed by having increased government engagement on social media as opposed to it being reactive only. For example, the government needs to be an active contributor to accurate information. Considering there is a space in which disinformation thrives, in particular where there is a lack of response, rumors spread. Civil society should also engage with policymakers and media representatives on enhancing digital literacy and fact-checking skills. The intermediaries should increase transparency and accountability in content moderation measures and conduct cross-sectoral periodic policy reviews.

Key Takeaways

  1. The weakest link in disinformation is the citizen, and therefore, one of the most effective ways to tackle the issue is to empower the citizenry to be able to detect and respond wisely to misinformation. If the general public is not informed, it is a lost battle.
  2. There is a thin line between misinformation and mal-information and it can easily be blurred.
  3. The Computer Misuse and Cyber Crimes Act 2018 is a double-edged sword that censors yet tries to get some accountability from the general public in regard to spreading misinformation.
  4. Safaricom reported that during the 2017 election, 50% of its time was spent monitoring fraudulent interactions.

Skilling Justice Actors in Digital Rights Advocacy in Africa

CIPESA Staff |

In June, 2022, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) conducted a regional capacity building workshop aimed at equipping participants with thematic understanding of key digital rights trends in the region, including disinformation, alongside practical skills development in impactful digital rights advocacy and communication.

Hosted in Lusaka, Zambia, the two-days workshop (June 28 and 29), attracted 20 participants from 10 African countries – Eswatini, Ethiopia, Kenya, Malawi, Mozambique, Rwanda, South Africa, Uganda, Zambia, and Zimbabwe.

According to Ashnah Kalemera, CIPESA’s Programme Manager, the training was part of various interventions through which, CIPESA is developing the capacity of different social justice organisations with the requisite skills to effectively engage in digital rights advocacy  including research methodology and communications, designing evidence-based advocacy strategies, as well as digital resilience.

“There is limited understanding of digital rights among traditional human rights defenders,  with many yet to make the direct link between technology, social justice and human rights as part of their advocacy efforts. Meanwhile, many are working in hostile environments, with shrinking civic space both online and offline,” said Kalemera. 

Although there has been a growing number of civil society and justice actors responding to and challenging government excesses over the years, there are still knowledge and skills gaps among actors that hinder their  engagement in meaningful policy advocacy. Findings from a 2017 joint research study conducted by CIPESA, Small Media, DefendDefenders, and the Centre for Intellectual Property and Information Technology Law (CIPIT) showed that in all of the countries surveyed (Burundi, Rwanda, Tanzania, and Uganda), civil society organisations (CSOs) failed to demonstrate a baseline of digital security knowledge, and/or failed to implement practices effectively.

The report notes that although the internet and related technologies have empowered CSOs to engage with the public, share information, and advocate for citizens’ rights in sometimes challenging and closed political environments, it has also offered means and tools that are used by state and non-state actors to interfere with their work, surveil them, and censor their voices.

In addition, digital security and safety skills are lacking among some of the most at-risk groups, yet trainers and support networks are in short supply. Without adequate digital security capacity, activists and human rights defenders are not able to meaningfully undertake advocacy and engagements around human rights, transparent and accountable governance.

CIPESA’s capacity building interventions are therefore designed and structured to provide both skills and knowledge modules and serve as a platform for developing collaborative advocacy strategies for advancing digital rights in the region. The training in Lusaka covered topics such as the interplay between technology, democracy and human rights; trends in digital rights violations such as arrests and intimidation of online users, internet blockages, surveillance and interception of communications. 

Other topics covered during the workshop were disinformation and human rights, which explored the implications of false and misleading information on online mobilisation and participation. Elsewhere, the workshop explored digital inclusion, with Zambia-based activist, Matha Chilongoshi of Revolt Media emphasising the need for increased engagement on the digital divide, online violence against women and girls and digital accessibility for persons with disabilities. In this regard, Kamufisa Manchishi, a Lecturer at the Mulungushi University – Zambia noted that the existing  digital disparities are a result of access and affordability barriers including failure by governments to design and implement universal service fund policies that prioritise equity. This calls for proactive efforts in policy influence for an inclusive digital society.

Indeed, as highlighted by Apolo Kakaire, the Advocacy and Communication Manager at the African Centre for Media Excellence (ACME), “in order for civil society’s work in Africa to impact government policy, help change attitudes and behaviour in society, and ultimately result in greater protections for internet freedom, there is a need to develop and implement robust advocacy and impactful communication strategies.

Post-evaluation of the training workshop indicated increased understanding of the key terms and concepts covered including the link between disinformation and freedom of expression, disinformation and internet shutdowns, and commitment by participants to apply the acquired knowledge and skills, including acting as infomediaries within their communities and organisations through awareness raising among colleagues, and conducting information verification prior to sharing.

“As a communication officer, I will cross-check and make sure that all the information I am sharing is not deceitful while encouraging others to do the same,” noted one participant. Another participant indicated that they would work to get more involved in advocacy regarding disinformation laws that are detrimental to human rights. “We are planning to have a workshop with the grassroots women human rights defenders on disinformation and human rights and develop a digital rights advocacy and communication strategy.” The planned workshop will take place in Kenya’s largest urban informal settlement, Kibera, led by Tunapanda.

DataBytes: Strengthening the Data Confidence of Africa Digital Rights Fund Grantees

By Data4Change |

“Numbers? Yes, but I was never very good at maths.”
“Data? Sure, but I don’t know how to use spreadsheets.”

Mathematical anxiety is real. These expressions are often heard from people who think data isn’t for them. For advocates, data-driven storytelling and investigations can support powerful campaigns to raise awareness and engage relevant stakeholders. Data4Change has designed an immersive and practical introduction to using data for advocacy. Dubbed DataBytes, the four-week remote programme shows data advocacy is for everyone, and that sometimes all you need is a pen and paper.

Image: Visual prototypes designed by participants in the Sketch a Data Story workshop

DataBytes itself uses a unique data-led approach. In the preparatory stage, participants take a Data Personality Quiz and chat with “Dot the Bot.” The data generated through these two activities helps the Data4Change facilitators understand the key strengths and potential areas of work for each specific participant.


Image: Data4Change’s quiz calculates a data personality type for respondents

DataBytes was piloted by Data4Change and the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) as part of institutional capacity building efforts under the Africa Digital Rights Fund (ADRF). The ADRF provides rapid response and flexible grants to initiatives advancing digital rights in Africa.

Targeting grantees of the fifth round of ADRF, the programme combined interactive questionnaires, games, offline self-study courses and live sessions (with simultaneous translation to French) to boost data confidence among participants.

“Numbers help understand the urgency and magnitude of the problem. It helps to legitimise our advocacy and creates more impact in our reporting” – DataBytes participant

The 16 participants, representing nine countries – the Democratic Republic of Congo, Kenya, Malawi, Sierra Leone, Somalia, South Africa, Tanzania, Togo and Uganda – gained hands-on experience in getting, cleaning, understanding and communicating with data.

Participants also learned to read datasets and develop data communication techniques as they produced their own bar and line charts, range plots, choropleth maps and scatter plots to uncover trends and patterns.

Image: A selection of charts created in Datawrapper by DataBytes participants

The programme closed with a much-needed conversation around Data Values and Data Ethics which explored the issues of data extractivism, real consent, and the ethics around data collection and processing. These complex topics were interrogated through a game of “Fortunately, Unfortunately” where participants collaboratively analysed possible scenarios where data collection ethics could be at stake.

Image: One of the “Fortunately, Unfortunately” scenarios created by DataBytes participants

The DataBytes programme builds on earlier joint efforts by CIPESA and Data4Change in strengthening data advocacy among digital rights actors in Africa. Previous efforts, targeted at the first and second round of ADRF grantees, featured capacity assessments followed by data workflow and visualisation workshops – foundational and advanced levels. Two ADRF grantees – the Mozambique Disabled Person’s Organisation (FAMOD) and Digital Shelter – went on to be supported to develop data-driven campaigns. FAMOD’s campaign promotes web accessibility for persons with disability in Mozambique, while that of Digital Shelter is on women’s inclusion and safety online in Somalia.


Images: A selection of screenshots from campaigns co-created with FAMOD and Digital Shelter

Furthermore, CIPESA and Data4Change conducted a data-driven Sketchathon for digital rights at the 2021 Forum on Internet Freedom in Africa (FIFAfrica) targeting actors in Lesotho, Mozambique, Tanzania, Uganda, Zambia, and Zimbabwe.

Image: The cover of the Sketching Shutdowns workbook

Image: Sketches created during the Sketching Shutdowns Workshop