Ethiopia Ministry of Innovation and Technology to Co-host the 2019 Edition of the Forum on Internet Freedom in Africa (FIFAfrica)

Announcement |
The annual Forum on Internet Freedom in Africa (FIFAfrica) will this year be hosted by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) alongside the Ethiopian Ministry of Innovation and Technology in Addis Ababa, Ethiopia. The partnership is part of the Ministry’s digital transformation efforts, and aims to engage stakeholders on strategies for harnessing the benefits of new technologies.
“We are thrilled to collaborate in hosting the 6th FIFAfrica in the diplomatic capital of Africa, Addis Ababa, Ethiopia. As a ministry we are working to ensure the country’s sustainable development through creating an ecosystem that harnesses innovation and transformation through technology. The internet is a space/platform where knowledge is created, developed and shared, where learning, imagination, networking, and connectivity flourishes. Thus, we believe in upholding digital/internet freedom for the development of the country,” stated the FDRE Ministry of Innovation and Technology.
The Ministry is working towards building a digital economy and society grounded on knowledge and technology and as such “values the power of knowledge, novel ideas, learning and the unlimited potential of virtual endeavors”.
As Ethiopia continues to embrace wide-ranging political and economic reforms, it is integral to ensure greater awareness within the country as well as beyond its borders of what the reforms mean to the potential of ICT as an enabler of democratic governance and sustainable development. Indeed, FIFAfrica19 will be among recent strategic convenings in Ethiopia related to broadening the range of freedoms enjoyed by citizens online and offline, such as the World Press Freedom day commemoration last May.
FIFAfrica responds to rising challenges to the enjoyment of digital rights in various countries, that undermine the potential of digital technology to drive socio-economic and political development on the continent. The annual convening offers a platform for critical engagement of diverse stakeholders on internet rights and freedoms and looks at them through the lens of policy, regulation, and governance.
In spite of challenges that still exist, including in governance and security, over the last one year, Ethiopia has made notable strides in improving the state of internet freedom, in ways which can be instructive for other African countries.
FIFAfrica 2019 will thus provide a platform for the exchange of knowledge, skills, advocacy efforts and policy agendas that can have an impact on digital rights and internet governance agenda among key actors including policy makers, regulators, human rights defenders, law enforcement representatives, and the media in Ethiopia and Africa as a whole.
“The Forum is one of the few gatherings that assemble an African audience within the continent to discuss matters related to upholding internet freedom. We are pleased to co-host this edition of FIFAfrica with a key player in the Ethiopian telecommunications landscape. Like many other African countries, Ethiopia is witnessing changing trends in ICT adoption and use for which the forum provides an opportune platform for deliberation and consultations on the implications of related policy and practice with a wide array of stakeholders,” said Dr. Wairagala Wakabi, CIPESA Executive Director.
Among the Ministry’s undertakings at FIFAfrica19 will be the hosting of a high level meeting of government officials within the auspices of the ICT committee at the African Union (AU) to discuss some of the reigning concerns and initiatives related to innovation ecosystems, data protection and privacy, access and affordability, diversity and inclusion, network disruptions, and access to information, among others.
Hosting FIFAfrica19 in Addis Ababa will this year mark its return to East Africa since 2016 – in keeping with the stride of expanding the conversation, as well as knowledge and skills development to different parts of the continent. The 2018 edition was hosted in Ghana, while the 2017 was hosted in South Africa. Other editions since 2014 were hosted in Uganda.
FIFAfrica19 will be hosted at the Skylight Hotel in Addis Ababa, and is expected to assemble at least 300 participants from across the continent and beyond.
Social Media | Follow @cipesaug on Twitter for updates on the forum. Use the hashtags #FIFAfrica19 and #InternetFreedomAfrica to share your vision for digital rights in Africa

Are Malawians Sleep-Walking into a Surveillance State?

By Jimmy Kainja |
In the last three years, the Malawi government has passed a lot of legislation, among these, is the National Registration and Identification System (NRIS), which according to the National Registration Bureau, is aimed at addressing the lack of universal and compulsory registration – the NRIS allows Malawians to have a national ID.
According to UNDP, one of the main funders of the exercise, 9 million Malawians have registered as of October 2019. This shows that Malawians have generally welcomed the exercise. Meanwhile, the registration in on going all District Offices where anyone turning 16 years can register and have their ID card issued.
Reasons for the general acceptability of the ID registration differ and in absence of any survey it is difficult to generalise the reasons but it can be speculated that among the reasons is that the majority of Malawians lacked any form of ID to do daily transactions. Majority Malawians do not have a passport or driver’s license and yet advance in technology, mobile banking for example, has increased demand for IDs in the country.
Following the NRIS exercise, the national ID has become increasingly become the only form of identification for most public transactions and registrations. In 2018 Malawi government through its telecoms regulator, MACRA, rolled out mandatory SIM Card registration, this is provided for in PART XI of Communications Act, 2016. The voter registration for 2019 tripartite elections required the national ID as a form of identification; and now commercial banks in the country have rolled out what they are calling “know your customer” (KYC) exercise, in which clients have to update their personal information with the banks. This time the banks are only accepting the national ID as a form of identity for Malawians, and passport for none Malawians.
This means that in a very short space of time Malawians have given away a lot of their personal data to both private and public institutions. All the data is tied to one’s national ID. This includes our communication data through our SIM Card enabled communication – internet, text messages and voice calls. But who how safe is this personal data? During the voter registration exercise did we not hear of Malawi Electoral Commission found abandoned in Mozambique? How do we ensure that our personal data is safe? How can we be sure that no third parties have access to our personal data? Who should be held accountable in case of any data breach?
These are legitimate questions, especially as any breach of personal data has implications on personal privacy. Privacy is inviolable right and it is constitutionally provided for under article 21 of Malawi constitution. Often people argue that you should not worry about privacy if you have nothing to hide. Yet, privacy does not mean that you have something to hide.
Journalist, Glenn Greenwald observes that privacy is important because we all need places where we can go to explore the issue without the judgmental eyes of other people being cast upon us. He argues that their people have all kinds of things they want to keep a secret that has nothing to do with criminality. He adds:
“only in a realm where we’re not being watched can we really test the limits of who we want to be. It’s really in the private realm where dissent, creativity and personal exploration lie… When we think we’re being watched, we make behaviour choices that we believe other people want us to make … it’s a natural human desire to avoid societal condemnation. That’s why every state loves surveillance — it breeds a conformist population.”
In the wake of mass personal data collection, Malawi needs personal data protection legislation, and this legislation should have been in place before the NRIS and what has followed that exercise. Data protection is important in order to prevent third parties from accessing personal data and also stopping the authorities abusing personal data they collected in good faith.
Personal data protection is crucial for freedom of choice and freedom of expression. People are unable to express themselves freely in the presence of watchful eye on everything that you are doing, browsing on the Internet for example. Inevitably, this has a chilling effect on activists, human rights defenders and other vulnerable communities as these groups can easily be targeted by both state and non-state actors.
The mass collection of personal data in the absence of data protection law should be of concern to all Malawians as it has the capacity to allow state surveillance. Furthermore, the mandatory SIM card registration in the absence of data protection laws means that our private communication, online and offline can easily be violated by both state and non-state actors. As with the mandatory SIM card registration, governments usually use security to introduce laws and policies. But you cannot protect people on one hand while violating other rights and freedoms on the other. Security and civil liberties can and do coexist and it is the obligation of the state to balance the two.
*Note: this article is informed by Internet freedom and digital rights training for CSOs I coordinated and co-facilitated in Lilongwe (30-31st July 2019) on behalf of The Collaboration on International ICT Policy in East and Southern Africa (CIPESA).
This article was originally published in The Nation

An Assessment of Consumer Rights Protection in Nigeria and Uganda

Tomiwa Ilori |
Digitalisation has become integral in almost every facet of society, business, education, politics and health. Day-to-day interactions including commercial interactions are increasingly shaped by various forms of technologies and are often accompanied by the release of some form of personal data. However, due to the dynamic nature of the technologies that power e-commerce, laws in many jurisdictions are often playing catch-up with these changes. This includes the laws meant to ensure the protection of consumers that engage in online commercial transactions.
Globally, 101 countries out of a total of 195 currently have some form of online consumer protection legislation. While several of these laws did not anticipate the extent of the digitalisation, many of the rights and protection provided for are in line with international instruments for protection online. Some of these international policy frameworks include the Organization for Economic Co-operation and Development Guidelines for Consumer Protection in E-commerce (OECD), the United Nations Commission on International Trade Law Model Law on E-Commerce (UNCITRAL), the United Nations Guideline for Consumer Protection (UNGCP) and the International Consumer Protection and Enforcement Network (ICPEN).
Across board, these instruments recommend for countries to implement regulatory frameworks for the benefit of online users in the global digital economy, including transparency and effective protection, online disclosures, protection of consumers’ personal data by vendors. Meanwhile, on May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) came into effect, forcing African countries, especially those with strong trade ties to the EU, to work towards prioritising data privacy and to more decisively meet their duties and obligations to ensure compliance with the Regulation.
However, of the 54 countries in Africa, only 20 have  laws which pertain to online consumer rights and electronic transactions, while six have draft laws.
Uganda enacted laws on electronic transactions, electronic signatures and computer misuse in 2011. However, gaps remain in adequately securing online consumers rights. Part IV of the Electronic Transaction Act of 2011 (the ETA) provides for consumer protection, with disclosure obligations of online service providers outlined under Section 24[3] [S4] . Among the information that should be accessible to consumers are description of goods and services offered; full price including taxes and transport fees; mode of payment; applicable guarantees; delivery timelines; code of conduct; as well as the security procedures and privacy policy, among others. Sections 24(3) and 25 provide for the right of cancellation and refund.
The ETA is light on offences and heavy on directives. The most notable offence provided for by the Act is where a sender of commercial information is found guilty of sending unsolicited messages to a consumer as provided for under Section 26 of the Act. Where it was sent without the consumer’s consent, such sender is liable for a fine of 1.44 million Ugandan Shillings (USD 384) or three years in jail or both. Where it is sent after the consumer has opted out of receiving such information, such sender is fined for 2.4 million Ugandan Shillings (USD 658) or a jail term of five years or both.
There is currently no formal international law position on these offences provisions with respect to consumer rights online. What exists in international instruments already mentioned above are guidelines which do not carry sanctions. However, in the United States, a sender found guilty of the offences of Section 26 of the ETA will be fined 59.3 million Ugandan Shillings (USD 16,247) for each email sent under the Controlling the Assault of Non-Solicited Pornography And Marketing Act of 2003 (the CAN-SPAM Act).
Meanwhile, Uganda’s cybercrimes legislation – the Computer Misuse Act 2011 – is relevant to consumer protection under Section 19. The section provides for an offense of electronic fraud which is occasioned by deliberate act of unfair or unlawful gain through a computer system. Under Section 12, the man-in-the-middle attacks could be said to be an offence which criminalises unauthorised use of a computer. If found guilty, an intruder is liable for a fine of 4.8 million Ugandan Shillings or ten years imprisonment or both. Sections 17 and 19 provide for punishments for unauthorised disclosure of access codes and electronic fraud respectively. A person found guilty is liable for a fine of 7.2 million Ugandan Shillings or a jail term of 15 years or both in both instances.
Recently, Nigeria also enacted a legal framework that protects consumers’ rights online. Passed in February 2019, the Federal Competition and Consumer Protection Act has the protection of the consumer’s welfare as one of its core objectives. The objectives of the Act will be implemented by a Federal Competition and Consumer Protection Commission and enforced by the Competition  and Consumer Protection Tribunal.
Similar to the case of Uganda, Part XV of the 2019 Act provides for consumer rights ranging from but not limited to the right to information in plain and understandable language, right to disclosure of prices of goods and services, right to proper labelling and trade description, right to disclosure of re-conditioned or second hand goods; right to cancel; right to examine goods; right to return goods and implied warranty as to quality. Whereas the act does not explicitly refer to online products and services, the above provisions are applicable for both online and offline protection of consumer rights in Nigeria.
In addition to the recent substantive law, in early 2018, the Consumer Protection Council established by the Consumer Protection Council Act of 2004 developed some principles that attempted to address issues of e-commerce in Nigeria including adding clarifications to online transactions. The principles also recognised that the country’s digital economy legal framework is still developing. While these principles are largely consumer-facing in terms of digital commerce in Nigeria, they admit that Nigeria requires a more concrete law to establish a consumer rights online regime.
What can be seen in the nature of online consumer rights in Nigeria and Uganda is that while Nigeria has 103 million internet users (July 2018) and an internet penetration just over 50%  in comparison to Uganda’s 18 million users (June 2018) and internet penetration of 35%, Uganda may be said to be fast catching up with consumer protection laws even though enforcement might be slow while Nigeria has just provided a conducive legal environment for its digital economy landscape.
An analysis of Uganda and Nigeria’s consumer online protection regulatory efforts shows that despite the teeming growth of internet users and a legal framework in Nigeria, these developments have not yielded the necessary measures to secure Nigerian consumers in the digital age. In Uganda, there is a link between the Social Media Tax introduced in July 2018 by the government and the decrease in the number of internet users in the country. This in effect, negatively impacts and reduces consumer participation in online consumer protection regulation.
With astronomical growth in mobile payments and electronic transactions in both Uganda and Nigeria which are directly contributing to boosting the digital economy, both governments need to support more policies that address the complexity of regulatory technology while paying attention to consumer rights and protection.

Inaugural Winners of the Africa Digital Rights Fund Announced

Announcement |
The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is pleased to announce the winners of the first round of the Africa Digital Rights Fund (ADRF). A total of USD 65,000 has been awarded to 10 initiatives that will advance digital rights in 16 African countries – Algeria, Burundi, Egypt, Ethiopia, Gambia, Mozambique, Namibia, Nigeria, Sierra Leone, Senegal, South Sudan, Tanzania, Tunisia, Uganda, Zambia and Zimbabwe.
Launched in April 2019, the ADRF is aimed at growing the number of individuals and organisations that work to advance digital rights in Africa, amidst rising digital rights violations such as arrests and intimidation of internet users, network disruptions, and a proliferation of laws and regulations that hamper internet access and affordability, and undermine the potential of digital technologies to catalyse free expression, civic participation, and innovation.
Although it is still early days, the Fund has received profuse interest from across the continent, with several worthy initiatives proposing projects including in countries with numerous digital rights challenges but little effort to address them. 
According to Ashnah Kalemera, the CIPESA Programmes Manager, the first call for proposals attracted more than 150 applications from 30 countries. “Digital rights advocacy, digital safety and security skills building, innovating for social enterprises’ efficiency, litigating for digital rights, and empowerment for marginalised communities, were among the prevalent lines of work proposed. There were few proposals in the area of research, and much fewer on engagement in legislative processes, despite the ongoing enactment of often retrogressive laws and regulations governing digital rights,” she said. 
The applicants were assessed by a panel of experts based on the following attributes:

  • The applicant’s experience in advancing digital rights/track record on similar work;
  • Demonstrated need for the project including relevance to described context and  priorities of the Fund;
  • Eligibility in terms of geographic coverage, proposed activities, duration, and evidence of the applicant’s formal registration or operations;
  • Demonstration of innovation with regards to approach, feasibility of deliverables and timelines, and potential impact of the intervention;
  • Budget feasibility; and
  • Diversity considerations.

The review panel consisted of three internal CIPESA programme staff and four external experts with extensive experience in the digital rights field. The external reviewers were Neil Blazevic -Technology Manager at DefendDefenders (formerly East and Horn of Africa Human Rights Defenders Project), Sadibou Sow – West and Central Africa Regional Technology Advisor of Amnesty International, Dr. Edgar Napoleon  Asiimwe – Research Manager at the Swedish Programme for ICT in Developing Regions (Spider), and Koliwe Majama – Organiser of the Africa School of Internet Governance at the Association for Progressive Communications (APC).
The winners of the ADRF’s first call are:
1. Access for All – South Sudan
Access for All will  build the advocacy and digital security capacity of South Sudanese women refugees and human rights defenders. These engagements, which will be conducted in Arabic and English, will explore current human rights defenders’ security/ protection concerns in South Sudan, and the mechanisms to address them.  
2. African Human Rights Network (AHRN) Foundation – Tanzania
The project will strengthen the capacity of human rights defenders (HRDs) and their organisations on digital security and provide them with essential tools. A total of 60 Tanzania HRDs will be provided with training and exchange opportunities to reduce digital security risks. The project complements the activities of Shelter City Dar es Salaam which is a regional temporary relocation program for HRDs in the Great Lakes region.
3. Burundi Youths Training Centre – Burundi
The project will build the capacity of human rights defenders and media organisations in digital rights advocacy. The engaged organisations will be mentored to develop and implement strategic advocacy campaigns for digital rights, including the right to privacy and personal data protection in Burundi.
4. Centre for Human Rights, University of Pretoria – South Africa
The centre will document and analyse threats and mounting pushbacks against civil society in the digital age in Egypt, Sierra Leone, Uganda, and Zambia. Leveraging its network of former graduates and local partner tertiary institutions, the centre will map the legal and digital threats to civil society in the focus countries in order for stakeholders to have full evidence-based knowledge of these threats and how to navigate them. The bilingual (French and English) research outputs will feed into the centre’s Master’s programme curriculum module on civil society studies in Africa and short courses on human rights and good governance.
5. Freedom of Expression Hub (FoE Hub) – Uganda
In collaboration with the Uganda Law Society, the Freedom of Expression Hub will conduct digital literacy and litigation surgeries for lawyers and journalists in northern Uganda’s West Nile sub-region on emerging digital rights issues affecting freedom of expression, access to information and media rights. The surgeries aim to promote collaboration and rapid response to digital rights violations especially through courts of law. Furthermore, the Hub will work on creating a database of advocates who can adequately respond to digital rights cases in the sub-region.
6. Global Voices – Sub-Saharan Africa, Middle East and North Africa 
As part of its wider Advox programme, Global Voices will document experiences of  online mis/disinformation and the impact of internet shutdowns on citizens’ rights to freedom of expression and access to information during elections and protests in seven countries – Algeria, Ethiopia, Mozambique, Nigeria, Tunisia, Uganda and Zimbabwe. Through translation and targeted outreach, the project will contribute African perspectives to the global debate on mis/disinformation and shutdowns, and train local writers to improve their digital rights reporting skills.
7. Internet Society (ISOC) Namibia Chapter – Namibia
In the run up to the November 2019 elections, ISOC Namibia will work to build the capacity of journalists and editors to fact-check misinformation. It will also work with women parliamentarians, political activists and various other actors in a campaign to tackle politically motivated-gender based violence online.
8. Jonction – Senegal 
Jonction will  implement advocacy and awareness creation campaigns among state, private sector and civil society actors in Senegal to foster an enabling environment for freedom of expression, privacy and data protection online.
9. Kuza STEAM Generation (KsGEN) and Centre for Youth Empowerment and Leadership (CYEL) – Tanzania
The grant will be used to organise “Schools” on Internet Governance (IG) and digital rights through which various stakeholders will be trained and mentored to lead IG-related discussions at national and regional level. One of the schools will specifically target girls and women in Arusha so as to increase Tanzanian women’s participation in internet governance
10. YMCA Computer Training Centre and Digital Studio – The Gambia
Building on its youth-empowerment initiatives, YMCA Gambia will undertake a sensitisation drive on cyber-bullying and online safety among youths as a means of combating harassment and online abuse of women and girls.
 
 
 
 

Register for the Forum on Internet Freedom in Africa 2019 (#FIFAfrica19)

FIFAfrica |
On September 23-26, 2019 the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) will host the sixth Forum on Internet Freedom in Africa (#FIFAfrica). This year, FIFAfrica will take place in Addis Ababa, Ethiopia where we look forward to convening a  wide spectrum of stakeholders from across the internet governance and online rights arenas in Africa and beyond to deliberate on gaps, concerns and opportunities for advancing privacy, free expression, non-discrimination and the free flow of information online.

In its inaugural years, the Forum took place in Kampala, Uganda (2014 – 2016). Since then, FIFAfrica’s expanding footprint has seen it being hosted in Johannesburg, South Africa in partnership with the Association for Progressive Communications (APC) in 2017 and in Accra, Ghana in partnership with the Media Foundation West Africa (MFWA) in 2018. This year, we will host pre-events  (by invitation) will be  on 23 and 24 September while the main Forum event will take place on 25 and 26 September.
Register for FIFAfrica19
In the lead up to the forum is the invitation of ideas on what should form the basis of panel discussions, exhibitions, workshops and lightning talks at the event. We welcome proposals which can be completed as part of the registration form.
Please note the below important dates related to participation at the Forum. Submissions close at midnight  (East Africa Time) of the stated dates:
— The closing date for registration to attend is September 6, 2019.
— Session proposals will be accepted till July 31, 2019
— Applications for travel support will be accepted till  July 31, 2019
— Successful travel support applicants will be directly notified by August 30, 2019.
Register for FIFAfrica19