Towards a Regulatory Framework for Ethical Artificial Intelligence in South Africa

By Tusi Fokane |

Last month, the South African government launched the much-anticipated draft National Artificial Intelligence (AI) Planning discussion document that will guide the development of a national AI strategy and regulatory framework. The draft discussion paper was unveiled by the Department of Communications and Digital Technologies (DCDT) during the National AI Summit.

Consultations on the draft discussion paper are intended to solicit inputs from various stakeholders before the plan is presented to Cabinet, and therefore released formally for public comment. The DCDT also anticipates a series of consultative provincial seminars before the finalisation of the plan.

Furthermore, the DCDT proposes the establishment of an AI Expert Advisory Council to assist in developing a national AI strategy that will inform the final plan. It is anticipated that the Artificial Intelligence Institute of South Africa (AIISA) will also be a key role-player in supporting the DCDT in developing and implementing the plan. 

Speaking at the launch on April 5, 2024, the Communications and Digital Technologies Minister stated that: “public policy making, and frameworks must adapt to address the governance imperatives of AI and emerging technologies to protect globally agreed human rights.” To this end, the draft discussion document outlines six key pillars for the deployment of ethical AI in the country: accountability, inclusivity, safety and reliability, fairness, transparency, and privacy and security.

South Africa’s AI Ethical Considerations  
There are future potential AI harms which will require the adoption of a set of human and ethical considerations that have been postulated but where it is less clear what the optimal form of regulation is, such as: Anti-competitive behavior should the provision of key AI models, or other enablers, be concentrated in a small number of players.Risks in robotic or autonomous devices that use AI to decide on actions, such as AI-enabled autonomous cars.Aggressive loss of employment leads to social risks.Criminal behavior or other highly dangerous outcomes.Existential risks should AI “get out of control” and pursue goals detrimental to humanity.   Source: National Artificial Intelligence (AI) Planning Discussion Document, pgs 38-39.

The discussion document also proposes further investment in human capital and skills development for an AI-ready workforce, and a social support fund to mitigate against potential workforce disruptions that may result from AI.

Concerns on the proposed regulatory framework

The discussion paper provides a high-level outline on the regulatory approach, noting that it should be ethical and human-rights centred in order to respond to economic and social challenges. It also hints at the potential for self-regulation, stating that the regulatory framework should be “built on principles, or ethics, and human rights protection that provide guidance for those working on AI and enable even some degree of self-regulation.”

Although not sufficiently detailed, it takes note of concerns related to disinformation and fake news, bias and discrimination, copyright abuse, and privacy and data protection issues. Presumably, the final plan will provide more clarity on the direction of ethical AI regulation that the country intends to adopt.

Some stakeholders have criticised the draft paper, arguing that it fails to adequately prepare the country’s transition to an AI-enabled future. They contend that the current draft is too vague and high-level to elicit any meaningful engagement. They have recommended that the DCDT revise the draft, with stakeholder input, and that the revised version should “outline clear strategies for South Africa, drawing lessons from international practices to both encourage AI development while addressing associated ethical and harm risks effectively.”

An additional concern may be the proposed timelines, as the discussion paper anticipates that the ethics and governance framework, as well as regulations on standards, competition, data, and intellectual property, will only be published in 2025. One commentator noted that “…this is a good start; we now need to pull this through and move with speed.”

In the absence of a national AI framework, media reports indicate that South Africa’s Information Regulator is undertaking research to assess the potential impact of AI in relation to privacy and data protection under the Protection of Personal Information Act, 2013 (POPIA). In the meantime, the Information Regulator has established an AI reference group within its office.

Efforts to address potential AI impact on elections

The regulatory lacuna has resulted in one Member of Parliament questioning the risks of AI-based disinformation and misinformation with respect to the May 29 national election. There have been increasing calls to guard against the proliferation of harmful generative AI through deep-fakes or other disinformation content.

In an effort to ensure the integrity of the electoral process, the Independent Electoral Commission (IEC) has partnered with tech firms to minimise disinformation ahead of the country’s upcoming elections. The partnership aims to proactively address complaints of disinformation through the Real411 platform, without compromising the confidentiality of user data.

In addition, the Information Regulator recently issued a Guidance Note on the Processing of Personal Information of Voters, and the Countering of Misinformation and Disinformation during Elections. The guidance note recognises the right to privacy, and protection of personal information in cases where a person’s “voice and/or image is used without their consent to spread fake messages, particularly in instances where generative artificial intelligence is used.”

Furthermore, the Information Regulator calls on the IEC to issue a code of conduct to address misinformation and disinformation in digital platforms in order to promote free and fair elections. The guidance note further calls on political parties to commit to combating misinformation and disinformation through a statement of commitments related to monitoring the use of AI technologies (including data harvesting, microtargeting, deep fakes, and AI-generated content) in their election campaigns.

Whilst AI undoubtedly presents some risk to the electoral process, there are other stakeholders who are optimistic about the potential for AI to decrease voter apathy particularly amongst the youth, and to contribute to increased voter education and awareness.  Although South Africa seems well-positioned to be a fore-runner in AI deployment, given its advanced tech sector, the delay in crafting a coherent strategic, legal and regulatory framework for the country could hamper its digital transformation ambitions. It is clear that South Africa urgently needs to develop both an AI strategy, as well as a regulatory framework in order to keep up with AI deployment in the country if it hopes to remain competitive.

PRE-QUALIFICATION OF SUPPLIERS FOR THE PERIOD 2024–2027

Announcement |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is a leading centre for research and analysis of information aimed to enable policy makers in the region to understand ICT policy issues, and for various multi-stakeholders to effectively use ICT to improve governance and livelihoods. CIPESA works to defend and expand the digital civic space to enable the protection and promotion of human rights and to enhance innovation and sustainable development. We  focus on disparate actors including government, the private sector, civil society, media, policy makers and multinational institutions. 

CIPESA invites applications from competent companies for pre-qualification for supply of goods, works and services for the period of three years 2024-2027. Interested eligible suppliers are invited to apply for pre-qualification, indicating the category of goods ,works or services they wish to be considered for.

Eligibility.

Prequalification Documents must include copies of the following;

  1. Expression of interest to supply specific goods and services.
  2. Memorandum and Articles of Association
  3. Certificate of incorporation and registration
  4. Valid trading license
  5. Tax clearance certificates/VAT registration certificate.
  6. Evidence of past performance (Contracts, Invoices, LPOs, certificate of completion etc.)
  7. Proof of recent financial capability (audited books, bank statements)
  8. Bank details in Company name. 
  9. Recommendation Letters (3)

Download the Prequalification Documents

Submission purposes only:

Pre-qualification documents shall only be sent to [email protected] with subject matter  “Bid for Pre-Qualification – code (Indicate code for relevant category  applied for).

Documents must be received not later than 31st May 2024, at 5:00 pm local time.

Note. Any application received after the deadline will not be accepted.

PLEASE NOTE THAT NO HAND DELIVERED APPLICATIONS WILL BE ACCEPTED.

The ADRF Awards USD 134,000 to 10 Initiatives to Advance Tech Accountability in Africa

Announcement |

The grant recipients of the eighth round of the Africa Digital Rights Fund (ADRF) will implement projects focused on Artificial Intelligence (AI), hate speech, disinformation, microtargeting, network disruptions, data access, and online violence against women journalists and politicians. The work of the 10 initiatives, who were selected from 130 applications, will span the breadth of the African continent in advancing tech accountability.

“The latest round of the ADRF is supporting catalytic work in response to the urgent need to counter the harms of technology in electoral processes,” said Ashnah Kalemera, the Programmes Manager at the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) – the administrators of the Fund. She added that for many of the initiatives being supported, tech accountability was a new area of work but the various projects’ advocacy, research and storytelling efforts would prove instrumental in pushing for tech justice

Established in 2019 as a rapid response and flexible funding mechanism, the ADRF aims to overcome the limitations of reach, skills, resources, and consistency in engagement faced by new and emerging initiatives working to defend and promote rights and innovation in the face of growing digital authoritarianism and threats to digital democracy in Africa. The sum of USD 134,000 awarded in the latest round, which was administered by CIPESA in partnership with Digital Action, brings to USD 834,000 the total amount awarded by the ADRF since inception to 62 initiatives across the continent.

According to Kalemera, the growth in the number of applicants to the ADRF reflects the demand for seed funding for digital rights work on the continent. Indeed, whereas the call for proposals for the eighth round was limited to tech accountability work, many applicants submitted  strong proposals on pertinent issues such as digital inclusion, media and information literacy, digital safety and security, surveillance, data protection and privacy, access and affordability – underscoring the cruciality of the ADRF. 

Here’s What the Grantees Will be Up To

In the lead-up to local government elections in Tanzania, Jamii Forums will engage content hosts, creators and journalists on obligations to tackle hate speech and disinformation online as a means to safeguard electoral integrity. In parallel, through its Jamii Check initiative, Jamii Forums will raise public awareness about the harms of disinformation and hate speech.

Combating hate speech and disinformation is also the focus of interventions supported in Senegal and South Sudan. Ahead of elections in the world’s youngest nation, DefyHateNow will monitor and track hate speech online in South Sudan, host a stakeholder symposium in commemoration of the International Day for Countering Hate Speech as a platform for engagement on collective action to combat hate speech, and run multi-media campaigns to raise public awareness on the harms of hate speech. Post elections in Senegal, Jonction will analyse the link between disinformation and network disruptions and engage stakeholders on alternatives to disruptions in future elections.

In the Sahel region, events leading up to coups in Chad, Burkina Faso, Mali and Niger have been characterised by restrictions on media and internet freedom, amidst which disinformation and violent extremism thrived. As some of the states in the region, notably Burkina Faso and Mali, move towards an end to military rule and head to the polls, the Thoth Media Research Institute will research disinformation and its role in sustaining authoritarian narratives and eroding human rights. The learnings from the research will form the basis of stakeholder convenings on strategies to combat disinformation in complex political, social, and security landscapes. Similarly, Internet Sans Frontières (ISF) will study the role of political microtargeting in shaping campaign strategies and voter behaviour, and the ultimate impact on the rights to privacy and participation in Mali. 

In South Africa, the Legal and Resources Centre (LRC), will raise awareness about the adequacy and efficacy of social media platforms’ content moderation policies and safeguards as well as online political advertising models in the country’s upcoming elections. The centre will also provide legal services for reparations and litigate for reforms related to online harms.

A study has found that Africa’s access to data from tech platforms, for research and monitoring electoral integrity, was below that in Europe and North America. Increased access to platform data for African researchers, civil society organisations, and Election Management Bodies (EMBs) would enable a deeper understanding of online content and its harms on the continent, and inform mitigation strategies. Accordingly, the ADRF will support Research ICT Africa to coordinate an alliance to advocate for increased data access for research purposes on the continent and to develop guidelines for ethical and responsible access to data to study elections-related content.

The impact of AI on the information ecosystem and democratic processes in Africa is the focus of two grantees’ work. On the one hand, the Eastern Africa Editors Society will assess how editors and journalists in Kenya, Uganda, Tanzania and Ethiopia have adopted AI and to what extent they adhere to best practice and the principles of the Paris Charter on AI and Journalism. On the other hand, the Outbox Foundation through its Thraets initiative will research the risks of AI-generated disinformation on elections, with a focus on Ghana and Tunisia. The findings will feed into tutorials for journalists and fact checkers on identifying and countering AI-generated disinformation as part of elections coverage, and awareness campaigns on the need for transparency on the capabilities of AI tools and their risks to democracy. 

Meanwhile, a group of young researchers under the stewardship of the Tanda Community-Based Organisation will research how deep fakes and other forms of manipulated media contribute to online gender-based violence against women journalists and politicians in the context of elections in Ghana, Senegal, and Namibia. The study will also compare the effectiveness of the legal and regulatory environment across the three countries in protecting women online, hold consultations and make recommendations for policy makers, platforms  and civil society on how to promote a safe and inclusive digital election environment for women.

Past and present supporters of the ADRF include the Centre for International Private Enterprise (CIPE), the Ford Foundation, the Swedish International Development Cooperation Agency (Sida), the German Society for International Cooperation Agency (GIZ), the Omidyar Network, the Hewlett Foundation, the Open Society Foundations, the Skoll Foundation and New Venture Fund (NVF).

Call For Consultants: Enhance the Digital Rights Communication and Advocacy Capacity of CSOs in Uganda

Announcement |

The USAID Your Rights Activity, which is led by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), aims to expand civic space in Uganda, to pave the way for enhanced democratic freedoms and liberties. The project responds to the shrinking civic space characterised by human rights violations, declining media freedom, hostility towards political opponents and critics, increasing restrictions on civil society, and limited citizen participation. 

The main objectives of the Your Rights Activity include;

  1. Improving the environment for media and digital technology;
  2. Supporting media to inform, engage, and empower citizens to better understand, demand and exercise their human rights; and
  3. Enhancing the capacity of human rights defenders (HRDs), activists, journalists, and civil society organisations (CSOs) to operate effectively.

Under objective 3, CIPESA is working to build the capacity of HRDs and CSOs to embrace digital technologies in their work and to advocate for digital rights in their various forms.

It is against this background that CIPESA is looking for a team of consultants to conduct communication and advocacy needs assessments of 15 selected CSOs working in the area of democracy, human rights and governance. Up to a third of the CSOs will be based upcountry.

Scope of the Assignment

The first phase of the consultancy will involve the development of a tool(s) for the organisational needs assessments. The second phase will involve conducting the needs assessment. In both phases, the consultant(s) will work closely with CIPESA programme staff. 

Key areas of the organisational needs assessment will include the following: 

  • Advocacy (including digital) capacity
  • Communication (including media and public relations) capacity  
  • Gender mainstreaming efforts
  • Digitalisation plans
  • Incorporation of digital rights in programming

The needs assessment will feed into the development of curriculum for thematic training on digital rights and advocacy. The training will be complemented by mentorship.

Deliverables

  1. An inception report.
  2. Comprehensive tool(s) for organisational needs assessments.
  3. Detailed needs assessment report(s) highlighting key areas for capacity enhancement at the 15 CSOs.
  4. Recommendations for curriculum development and mentorship programmes.

Attributes of the Consultants We are Looking For

  • Demonstrated experience and expertise in conducting organisational capacity assessments, preferably in the civil society sector.
  • Good understanding of the civil society, media, and digital landscape in Uganda. 
  • Deep understanding of democracy, human rights, and advocacy issues in Uganda.
  • Demonstrated understanding of digital and data-driven advocacy. 
  • Demonstrated understanding of strategic communication planning.
  • Proficiency in analysing complex organisational structures and identifying capacity gaps.
  • Excellent writing skills.
  • Ability to work closely with CIPESA programme staff throughout the consultancy.

Submission

Interested consultants are invited to submit proposals outlining the qualifications of the Team Leader and associate(s), proposed methodology, including timelines, and budget to [email protected]. The deadline for submissions is 18:00 (East African Time) on May 24, 2024.

Does Kenya’s Digital Health Act Mark A New Era for Data Governance and Regulation?

By Edrine Wanyama |

In October 2023, Kenya enacted the Digital Health Act which seeks to promote the safe, efficient and effective use of technology for healthcare and to enhance privacy, confidentiality and security of health data. It also provides for the safe transfer of personal, identifiable health data and medical records to and from health facilities within and outside Kenya, and the development of standards for provision of m-Health, telemedicine, and e-learning.

While Kenya enacted the Data Protection Act earlier in 2019, the dedicated digital health law is a positive step towards addressing the potential data privacy challenges related to health data. The law could deliver dividends for the e-health sector by leveraging data and technology to devise interventions and solutions that improve health services delivery.

In a recent brief, CIPESA analyses the Digital Health Act and what it portends for health data governance in Kenya. As the brief notes, if rightly implemented, the law will offer lessons in proper health data governance, while ensuring the rights of data subjects and the principles of data protection are respected and promoted.

The new law is the latest addition to Kenya’s policy and legal initiatives that aim to buttress the health care system including through technology and improved data governance. Others include the National eHealth Policy 2016-2030 and the Guidance Note on the Processing of Health Data developed by the data protection authority.

The Digital Health Act presents an opportunity for strengthening patient data protection while making strides in addressing privacy challenges by emphasising the need to comply with the Data Protection Act, 2019. The law has set the pace for health data governance in Africa as it deals with data related to medical insurance, physician notes and diagnosis, medical records on current and past health history, and health data governance. Appropriate data governance will provide safeguards against breaches and misuse such as in disease surveillance, research and innovation.

Section 4 of the Act emphasises the data principles to be applied to health data: treating health data as a strategic national asset; safeguarding privacy, confidentiality and security of health data for information sharing and use; facilitating data sharing and use for informed decision-making at all levels; and using the digital health eco-system to serve the health sector and to facilitate, in a progressive and equitable manner, the highest attainable standard of health.

Data, including health data, requires specialised agencies to guarantee its protection. The Digital Health Act establishes a Digital Health Agency which is charged with establishing and managing an integrated health information system. The system will ensure quality assurance in the health sector, since it will be guided by data protection principles, scalability and interoperability, efficiency and effectiveness, simplicity and accessibility, and consistency. The Digital Health Agency will potentially promote accountability and transparency in the health sector.

While integrated data and information management systems offer numerous benefits, they also pose risks of abuse and privacy violations, especially during pandemics such as Covid-19, when there was surveillance on individuals based on health data. During the surge of Covid-19, several countries such as Kenya and Uganda adopted measures to contain the virus but with adverse impacts on data protection and privacy. It is imperative therefore that the Digital Health Agency takes all necessary measures to ensure that the Integrated Health Information System robustly guards against unauthorised access, processing, use and transfer of individuals’ private health information within the country as well as across its borders. 

Section 45 on e-Waste Management offers indications in the right direction for the management of e-waste in the health sector. It also provides pointers to promoting the use of sustainable models for e-waste management through public-private partnerships. Nevertheless, in promoting reuse and lifetime extension of e-waste in health data, the law potentially creates opportunities where e-health data may be used unfairly by unscrupulous individuals.

The Digital Health Act is a progressive move towards appropriate regulation of digital health services in Kenya. It points to the relevance of technology in enhancing health care amidst the growing significance of personal data, its protection, management and governance. Other countries in the region could borrow from Kenya’s example to enact similar legislation on digital health and health data governance.

Read the full brief here.