Challenges and Prospects of the General Data Protection Regulation (GDPR) in Africa

Policy Brief |
Privacy is a fundamental human right guaranteed by international human rights instruments including the Universal Declaration of Human Rights in its article 12 and the International Covenant on Civil and Political Rights, in its article 17. Further, these provisions have been embedded in different jurisdictions in national constitutions and in acts of Parliament.
In Africa, regional bodies have invested efforts in ensuring that data protection and privacy are prioritised by Member States. For instance, in 2014 the African Union (AU) adopted the Convention on Cybersecurity and Personal Data Protection. In 2010, the Southern African Development Community (SADC) developed a model law on data protection which it adopted in 2013. Also in 2010, the Economic Community of West African States (ECOWAS) adopted the Supplementary Act A/SA.1/01/10 on Personal Data Protection Within ECOWAS. The East African Community, in 2008, developed a Framework for Cyberlaws. Notwithstanding these efforts, many countries on the continent are still grappling with enacting specific legislation to regulate the collection, control and processing of individuals’ data.
On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) came into effect. The GDPR is likely to force African countries, especially those with strong trade ties to the EU, to prioritise data privacy and to more decisively meet their duties and obligations to ensure compliance.
See this brief on the Challenges and Prospects of the General Data Protection Regulation (GDPR) in Africa, where we explore the consequences of GDPR for African states and business entities.

Dialogue on Social Media and Mobile Money Taxation in Uganda

CIPESATalks |
The evolution of the digital economy in Uganda over the last 20 years has broken barriers associated to geography and time and thus enabled information flows critical for business processes, innovation, entrepreneurship, civic participation, learning and research, and government service delivery.
Following concerns on the growing public debt bill, and a constrained tax base, the Uganda government introduced a raft of taxes in the Excise Duty Act (Amended), notably on Over the Top (OTT) services and mobile money transactions. Beginning July 1, 2018, users must pay a tax of UGX 200 (USD 0.05) per day to access various social media platforms including Facebook, WhatsApp, Twitter and LinkedIn. For mobile money, a 1% levy applies to deposits and withdrawals, on top of a revised excise duty of 15% up from 10% on transfers. These taxes pose a huge threat on internet access and affordability, and financial inclusion for low income and marginalized groups such as women, youth and rural communities. In fact, the Alliance for Affordable Internet (A4AI) estimatesthat the social media tax will cost Uganda’s poorest up to 40% of their average monthly income to buy a basket of 1GB of data.
Accordingly, CIPESA in partnership with the Internet Society Uganda Chapter seeks to convene stakeholders to deliberate on the economic, social and human rights impact arising from the new taxes. The dialogue will deliberate on how policy making processes can advance inclusive and equitable access to the internet, promote innovation and consumer rights protection. The dialogue builds on previous ones convened by CIPESA, for multiple stakeholders in the ICT eco-system.
See full agenda here.

Register for the Forum on Internet Freedom in Africa 2018 (FIFAfrica18)

Register Now |
We are excited to open registration for the upcoming Forum on Internet Freedom in Africa 2018 (FIFAfrica18) set to take place on 26-28 September, 2018 in Accra, Ghana. The Forum is a landmark event that convenes various stakeholders from the internet governance and online rights arenas in Africa and beyond to deliberate on gaps, concerns and opportunities for advancing privacy, access to information, free expression, non-discrimination and the free flow of information online on the continent.
This year, the Collaboration on International ICT Policy in East and Southern Africa (CIPESA) hosts FIFAfrica18 in partnership with the Media Foundation West Africa (MFWA). It follows the the success of  last years Forum co-hosted with the Association for Progressive Communications in Johannesburg, South Africa.
Indeed, spreading the physical footprint of FIFAfrica across different regions of the continent ensures that the Forum lives up to its goal of unpacking internet freedom challenges and opportunities in sub-regions of Africa and developing responses that are collaborative, and informed by insights from the experience of other sub-regions of the continent. Hosting the Forum in in west Africa for the first time will not only open up the space to more west African civil society, private sector and public sector actors to contribute their experiences to the regional discussion, but will  also give life to the Forum’s commitment of ensuring broader regional representation and deepening conversations across the continent.
Register here – You can also make suggestions for session topics, panels, skills clinics, presentations or any additional activities that you’d like to see happen prior or alongside the Forum. Our vision is to have a Forum with representation from as many countries in Africa as possible.  There is limited funding to support participation at FIFAfrica18. Please note that preference will be given to applicants who can partially support their attendance.



Share your thoughts on your vision for Internet Freedom in Africa using #InternetFreedomAfrica  This year, the event hashtag is #FIFAfrica18

Independence Monument | Accra, Ghana

 
 

African Human Rights Commission Denounces Stringent Internet Regulation in East Africa

By Daniel Mwesigwa and Edrine Wanyama |
The African Commission on Human and Peoples’ Rights (ACHPR) has denounced moves by countries in East Africa to slap stringent regulations on internet access and use. The commission’s Special Rapporteur on Freedom of Expression and Access to Information in Africa, Lawrence Mute, and the Country Rapporteur responsible for monitoring the human rights situation in Kenya and Tanzania, Solomon Dersso, said in a statement that they wished to “express concern on the growing trend of States in East Africa adopting stringent regulation measures on the Internet and Internet platforms.”
Reminding the states of their obligations under continent-wide human rights instruments, the Commission urged them “to ensure that regulations do not undermine their commitment to ensure freedom of expression and access to information on the Internet and social media platforms.”
The Commission’s statement comes at a time when countries in the region are increasingly looking at the internet as a threat and using a series of strategies to curtail citizens’ access and use of digital technologies. In recent months, Tanzania, Uganda, and Kenya have appeared to read from the same script in curtailing freedom of expression and the free flow of information online.
Last April, Tanzania issued regressive regulations that require all online content providers including discussion forums, podcasters, bloggers, online radios and TVs to register at prohibitive costs prior to licensing. Enforcement of the regulations has resulted in suspension of bloggers and shutdown of some websites, while some social media activists have been arrested and threatened.
Meanwhile, Uganda has this month introduced tax on ‘Over-The-Top’ (OTT) services, which requires users to pay Uganda Shillings (UGX) 200 (USD 0.05) per day to access social media and other sites. The move has undermined affordability of the internet and, like an earlier March 2018 directive requiring online publishers, news platforms, radio and television operators to obtain  authorization has been widely interpreted as an attempt by government to muzzle citizens’ voices online. Uganda’s president, Yoweri Museveni, has on several occasions accused social media users of peddling “lies” and “gossip”.
In May 2018, Kenya enacted the Computer Misuse and Cybercrimes Act, which human rights defenders contend contravenes constitutional provisions on freedom of opinion, freedom of expression, freedom of the media, and the right to privacy. Also, Kenya’s Film and Classification Board (KFCB) issued a directive requiring licenses for anyone interested in distributing or sharing video content on social media irrespective of whether captured using a professional camera or basic phone camera.
The full July 12, 2018 statement from the Commission, a body established in 1987 under the African Charter to protect and promote human and peoples’ rights throughout the continent is available here.
 

A New Interception Law and Blocked Websites: The Deteriorating State of Internet Freedom in Burundi

By CIPESA Writer |

 The state of internet freedom in Burundi continues to decline as the government of President Pierre Nkurunziza tightens control over independent media and critical online publishers. Of recent, frivolous sanctions have been slapped against media houses, access to some online publishers’ websites restricted, and last May, an obnoxious law was enacted that makes it easier for security agencies to conduct surveillance on citizens’ communications with little judicial oversight.

The deteriorating situation follows a May 2015 coup attempt which saw the physical destruction of five private radio and televisions stations by loyalist forces and pro-government militia, and the arrest of several journalists. The events were preceded by a government order to Internet Service Providers (ISPs) to block access to social media platforms such as Facebook, WhatsApp, Twitter, and Viber, so as to curtail demonstrations against Nkurunziza’s bid to run for a new term in office.

On May 11, 2018 Burundi’s president assented to Law No 1/09 of May 11 2018, which amends the Code of Criminal Procedure of 2013. Under Article 47 of the new law, government agencies carrying out investigations can intercept electronic communications and seize computer data. Further, Articles 69, 70 and 71, permit the public prosecutor to issue a written order to start interception of electronic communication of a person under investigation.  Moreover, the public prosecutor has the right to instruct service providers and “any qualified agent” from a department or agency under the authority or supervision of the telecoms minister to install any device to facilitate interception.

On the issue of seizure of computer data, Article 72 grants the public prosecutor, without notifying a person under investigation, the right to order the use of technical tools to access data on the suspect’s device (wherever it is located), to save that data, and transmit it. The tool also has the aim of real time capture of data being received or transmitted by the suspect’s device or being typed on the device. The initial duration of this order is a maximum of six months but this period can be extended for another six months if needed. The seized data has to be destroyed after trial. Articles 73 to 79 provide details of conditions in which the technical tool is used.

The new law, which was introduced on April 28 and passed within two weeks, is deemed to be in contravention of the constitution. A human right activist has stated  that the law is “clearly a wish to legalise the illegal and arbitrary practices that the forces of law and order have already resorted to for the last three years.” On the contrary, the justice minister defended the law, arguing that the amendments were necessary to give the prosecutor and other government organs powers to address new forms of criminal activity that have emerged in the last few years.

The amendments to the Code of Criminal Procedure come into place when online news media is under attack. Since October 2017, the websites of independent local news publishers http://www.iwacu-burundi.org, http://www.isanganiro.org, and http://www.ikiriho.org cannot be accessed from Burundi except through use of circumvention methods such as proxies. Tests using the network measurement tool, Ooni probe  indicate that the websites are blocked from access within Burundi.

In interviews, Iwacu officials confirmed that access to their website was blocked but the Conseil National de la Communication (Burundi’s media regulator) denies any hand in it. Some experts believe the blockage was effected at the level of the Burundi Backbone System (BBS), the primary bandwidth carrier from which most Burundian ISPs purchase bandwidth. Representatives from BBS denied this allegation and advised the news sites to work with ISPs to resolve the matter. Meanwhile, an October 2017 letter to the CNC from the Ikiriho group, an independent online press group (www.ikiriho.org), requesting that its website be unblocked has never received a response.

Interestingly, Isanganiro’s radio station still operates from within Burundi, as is Iwacu’s weekly print newspaper. Online access to the electronic version of Iwacu’s weekly newspaper is charged at USD 27 for a three months subscription, or USD 95 yearly, which means the challenges in accessing its website is affecting the publisher’s revenues. Iwacu accordingly announced an alternative website where readers can access news and has been assisting readers, particularly paying customers, to access its main site using virtual private networks (VPN).

On April 10, 2018, in what seemed like an additional sanction against the online portal, the CNC issued its decision No 100/ CNC/005 ordering Iwacu to ban the comments section of its online news website. The ban followed comments made by the website readers referring to Burundi as a “Banana Republic” while another called the National Police a “presidential police” due to its partisan actions. According to the regulator, the comments violated Article 17 of the Burundi press law No 1/15 of May 9 2015, which requires media groups to rigorously cross-check sources of information before publishing. The three months ban on readers’ comments, is the second slapped on Iwacu by the CNC, the first having been issued in 2013 for similar reasons.

In sanctioning Iwacu, the CNC cited article 55 of the press Law, which gives the communications regulator “the right to suspend or prohibit the use of a press pass (journalist pass or press card), the distribution or the sale of a printed newspapers, a periodical, or any other information medium, the broadcast of a show, the operation of a radio or television station or a news agency, when they do not comply with the law.”

The Iwacu director expressed his sadness at what he deemed an “unfair decision” that would close a “democratic space” where all opinions, both critical and supportive of the Burundi were shared. Nonetheless the comments section was promptly shut down, and currently under each news item there is a message reading: “Due to the CNC’s decision, you cannot react nor add any comment to this article.

In another worrying development, on May 4, 2018, the CNC issued warnings to three radio stations – Radio Isanganiro, Radio CCIB FM+, and Radio France International (RFI, and suspended the licences for BBC and Voice of America (VOA) for six months on allegations of not verifying sources and  broadcasting unbalanced news. The BBC was faulted for interviewing Pierre Claver Mbonimpa, a Burundian human rights defender who fled Burundi after an assassination attempt in 2015. The regulator claims that, in the interview which aired on April 24, 2018, the activist who is now based in Europe made “defamatory statements against the head of state” and incited “hatred”.

The VOA was accused of publishing unverified news on three occasions during April 2018. In addition, the VOA was accused of broadcasting through the Online Radio Box application used by Radio Bonesha, a local station whose frequency license was withdrawn by the media regulator last September. Radio Bonesha is among the media houses whose premises were destroyed in 2015 following the coup attempt but it has continued broadcasting via Online Radio Box.

The various developments in the online sphere reflect a similarly worrying rights situation offline. Nkurunziza’s government has continued to face criticism at home and abroad, including accusations by a United Nations committee of inquiry of extrajudicial killings of civilians, including supporters of the opposition, in what could amount to crimes against humanity.

Some observers believe that all criminal code amendments and measures against online and traditional media aimed to silence dissonant voices at a time the country was about to hold a May 17, 2018 referendum on a new constitution. Majority of voters – 73% – voted in favour of the new constitution but opponents say the poll was full of irregularities.

The Burundi government needs to respect the constitutional rights to free speech, access to information and privacy of the citizens and desist from enacting laws and taking other actions that undermine digital rights. Moreover, it should desist from passing laws and regulations without giving citizens the opportunity to meaningfully provide their views.