Compelled Service Provider Assistance for State Surveillance in Africa: Challenges and Policy Options

By CIPESA Writer |

In many Sub-Saharan countries, state surveillance, which generally refers to state measures to monitor and supervise activities of the population, has become more pervasive and reliant on various digital technologies. The increasing communication surveillance, which entails the monitoring, interception, collection and retention of information through communication networks, undermines digital technology users’ rights, including to privacy, and often places intermediaries in a position where they fail to comply with the United Nations Guiding Principles on Business and Human Rights (UNGPs).

The right to privacy online is critical due to its intricate connection with, and its being a foundation for the protection and realisation of other rights, including the rights to freedoms of expression, information, assembly, and association. Anonymity while using digital technologies helps mitigate risks of surveillance and interception of private communication as well as retaliation by the state or other parties. The fear of retaliation often forces individuals to withdraw from active participation in political and community affairs.

Also concerning are the strenuous and sometimes unclear demands by states on intermediaries, including to facilitate interception of communication, hand over communication data of their subscribers to state security agencies, and to take down content or shut down the internet. Others have adopted repressive legislation to control the spread of information on social media and to wantonly regulate internet intermediaries by placing undue liability on them for the content posted on their platforms.

This policy brief examines how mandatory obligations on telecommunication intermediaries to facilitate state surveillance undermines their ability to comply with international standards including the UNGPs, and hamper users’ rights. It draws on experiences from around Sub-Saharan Africa to illustrate how service providers are compelled through retrogressive policies and practices, to comply with state surveillance instructions. 

This brief provides recommendations for governments, social media platforms, Internet Service Providers (ISPs), and civil society aimed at entrenching progressive principles in the implementation of lawful interception, empowering civil society actors to engage with technology companies to improve their human rights policies and practices, and informing efforts by businesses in awareness raising and advocacy for progressive technology governance.

Why Compelled Service Provider Assistance is Problematic

Compelling service provider assistance is a key contributor to undermining users’ privacy in Africa. The assistance rendered by intermediaries is used to facilitate internet disruptions, access to users’ data with ease, content removals, decryption of users’ encrypted data, and state surveillance.

According to the brief, laws on surveillance and the interception of communications across the continent, including in Benin, Cameroon, Chad, Ivory Coast, Malawi, Mali, Niger, Nigeria, Rwanda, Senegal, Tanzania, Togo, Tunisia, Uganda, Zambia and Zimbabwe mirror each other and require communication service providers to put in place mechanisms, including the installation of software, to facilitate access and interception of communications by state agencies.

Those laws do not provide for sufficient judicial oversight or accountability mechanisms yet they place undue requirements on intermediaries, such as compelling them to facilitate communication interception by state authorities, including in instances where there are no court-issued warrants authorising surveillance. 

The brief makes several recommendations, among them:

Governments 

Develop, review, update and strengthen national laws, policies and practices on state surveillance in order to bring them into compliance with well-established international human rights standards including as elaborated in Principle 41 of the Declaration of Principles on Freedom of Expression and Access to Information in Africa, and the International Principles on the Application of Human Rights to Communications Surveillance (Necessary and Proportionate Principles).

Revise national laws governing state surveillance to ensure that they provide for clear and robust oversight over surveillance including by judicial and legislative bodies. 

Implement the actionable steps and meet their obligations with respect to the protection of the right to privacy under the protect, respect and remedy framework in the UN Guiding Principles on Business and Human Rights, including moving towards mandatory human rights due diligence, which could be instrumental in regulation of technologies and the tech sector. 

Technology Companies
Conduct human rights due diligence to identify, prevent or mitigate risks of compelled service provider assistance and surveillance on the lifecycle of the products and services and their business operations. 

Develop rights-respecting policies, responsible business practices and culture in line with international human rights standards such as the UNGPs and the Necessary and Proportionate principles, with a key aspect of such policies focusing on how the companies assess government requests for users’ data and for surveillance support.

Speak out on national laws, policies and directives that place undue obligations and liability on intermediaries and hinder them from fulfilling the UNGPs.

Civil society 

Adopt a multi-stakeholder approach to digital rights advocacy as a critical avenue to promote shared understanding of the human rights risks and impacts of technology and communication surveillance in Africa. 

Collaborate with other stakeholders in various African countries to advocate against continued unchecked communication surveillance and to promote the adoption of international human rights standards on privacy and data protection. 

Conduct strategic public interest litigation to challenge laws, policies, practices and directives that threaten the right to privacy, such as those on compelled service provider assistance, and obtain remedies for victims of illegal state surveillance.

Academia

Conduct research to promote greater understanding of the human rights risks of communication surveillance and the technology business models on the continent. 

Review the surveillance, privacy and data protection laws, standards and guidelines and propose domestically-driven policy solutions on how to entrench and domesticate international human rights standards and principles on the right to privacy.

CIPESA at the Digital Rights and Inclusion Forum (DRIF23)

By CIPESA Writer |

The Digital Rights and Inclusion Forum (DRIF) is an annual convening hosted by Nigeria based Paradigm Initiative. Themed “Building a sustainable Internet for all”, this year, the event is being hosted in Nairobi, Kenya on 12-14 April. DRIF is a platform where conversations on digital policy in Africa are shaped, policy directions debated and partnerships forged for action. 

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) will host and participate in a range of discussions at DRIF alongside various regional and international partners.

Below are the sessions and workshops CIPESA will participate in.

Examining Disinformation Trends and Effects in Africa 

Host: CIPESA

12 April 2023 | 12:15pm – 1:00pm (Nairobi) | Attend

 Disinformation is growing to near-pandemic levels in various African countries yet the spectrum of its adverse effects on fundamental rights, civic participation and public safety is not fully known. What is clear is that disinformation undermines the resilience and safety of human rights defenders (HRDs) and journalists, while hampering free expression and public participation. Led by CIPESA, this session will bring together disinformation researchers, fact-checkers and HRDs to discuss trends in disinformation instigators, tactics, pathways, and the effects that disinformation has on their work. It will explore disinformation effects on electoral integrity, the role of political actors as instigators and agents of disinformation, the effects of government counter-measures on civic rights and freedoms online. It will also unpack the role that different actors, including the private sector, ought to play in order to definitively tackle the vice.

Re-designing for a sustainable future through effective digital rights advocacy at the UPR

Host: Small Media Foundation

12 April 2023 | 2:15pm – 3:15pm (Nairobi) | Attend

This session has two major goals — to learn from the past successes and challenges of digital rights advocacy at the UPR and think through ways of building stronger partnerships with stakeholders on the ground. To start with, there will be a presentation on designing campaign and advocacy materials for digital rights at the UPR. After this, the session will take a look back at the last three UPR cycles and digital rights development, identify the successes and challenges and see how these fit into a future for a more vibrant advocacy at the UPR. It will also map the various strategies necessary to pool stakeholders in countries worked on by the UPROAR project together with respect to advocacy for digital rights at the UPR.

The primary goal of such a pool is to have at least one go-to stakeholder that can be approached in each country where UPROAR works for on-the-spot information with respect to digital rights advocacy at the UPR. The post-event value of this session is to have both an evaluation of digital rights advocacy at the UPR so far and strengthen monitoring through partnerships on the ground.

#KeepItOn Election Watch: supporting the fight against internet shutdown in 2023

Host: Access Now

12 April 2023 | 3:30pm – 4:30pm (Nairobi) | Attend

Access Now and the #KeepItOn coalition will be monitoring at least 15 elections in 2023 to ensure that authorities in these countries do not interfere with internet and digital communications throughout the electoral process. This session seeks to provide insights about the #KeepItOn Election Watch campaign to the DRIF participants and explore opportunities of working together with other partners. The session will also be an opportunity for participants to reflect on the challenges, lessons learnt and opportunities faced in the fight against shutdowns. At the end of the session, participants will learn about the various ways in which they can support the #KeepItOn community.

At What Risk to Rights and Internet Freedom? Examining Government Responses to Disinformation

Hosts: Article 19 West Africa, CIPESA, Centre for Human Rights University Pretoria, PROTEGE QV, Global Partners Digital

13 April 2023 | 11:30am – 12:30pm (Nairobi) | Attend

This session will turn attention to actions governments have taken in recent years to pass laws and policies that impact human rights online – particularly freedom of expression – in the name of fighting disinformation. The session will discuss the role of human rights defenders and civil society in countering these actions and calling for change. Specifically, it will look to country case studies utilising the research tool lextoa.org – such as from Uganda and Senegal and also Kenya as the DRIF 2023 host country – where such laws exist and the ways in which civil society has provided analysis, engagement (of media, policymakers, companies) and recommendations to governments on promoting policies that respect human rights. Session participants will be encouraged to ask questions of the panellists and bring their own experiences from differing national contexts across Sub-Saharan Africa to the debate. They will also be invited to contribute to ongoing research and awareness raising of this issue on lexota.org and contribute resources and new material to the site.

Internet Access and Marginalisation in Africa: Experiences Within Africa

Host: Global Voices

14 April 2023 | 9:00am – 10:00am (Nairobi) | Attend

Issues of connectivity have been a major challenge in Africa and the world as a whole. Over the last few years, Africa has experienced exponential growth in internet access spurred by mobile internet, which stood at 28% penetration in 2020. However, internet access and affordability are still a major challenge for the majority of Africans, especially the marginalised rural communities, women, and persons with disabilities. According to the State of Mobile Internet Connectivity 2021, Sub-Saharan Africa has the largest coverage gap (those living in areas without mobile broadband coverage) at 19%, which is more than three times the global average. A new report detailing the cost of mobile data in different markets across the world bears the evidence of why internet use in most of Africa remains low despite the growing broadband internet coverage. This session provides a platform to interrogate barriers to internet access and their exclusionary effect as well as to provide solutions and recommendations to the issues of internet connectivity across Africa

Closed 2-Day Workshop – The Future of Digital Rights in Africa: The Role of Policymakers and Advocacy at the UPR

Hosts: UPROAR & CIPESA

The objective of this workshop is to identify the various and applicable human rights frameworks under international, regional and national frameworks. The session will highlight some of the major provisions of these frameworks and how the UPR can be used to shape the national frameworks. We will also learn how to identify digital rights issues and apply practical solutions to resolving them. By the end of this session, participants will understand the supporting human rights instruments for UPR and how local laws can be made to conform with international standards.

Court Admits Expert Views from CIPESA, Access Now and Article 19 on Uganda’s Digital ID 

By CIPESA Writer |

On March 24, 2023, the High Court of Uganda at Kampala ruled to allow experts from Access Now, ARTICLE 19, and the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) to offer their opinions on the human rights red flags around the country’s digital identification (ID) system. 

The ruling followed an application by the three organisations for admission as “Friends of Court” in a case which challenges the use of the National Identification Register as the sole data source and primary means of identification prior to accessing various social services. Uganda’s national digital ID, also known as Ndaga Muntu, is a mandatory scheme for accessing various socio-economic services.

The court admitted the amicus brief submission by the trio despite objections from the Attorney General and the National Identification Registration Authority (NIRA) on grounds that the application was facilitated by bias and partiality of the applicants. The respondents further argued that the applications introduced new, inadmissible evidence – an assertion the court did not agree with. The court, in fact, noted the significance of the arguments raised  by Access Now, ARTICLE 19 and CIPESA, particularly on data protection, digital inclusion, surveillance, and the sufficiency of protection measures and their impact on the right to privacy.

The admission means that the court will consider the opinions of the three organisations in determining the case challenging Uganda’s digital ID system. In his ruling, Justice  Boniface Wamala noted that the matters the three organisations raised did not constitute evidence. Rather, they “constitute legal concepts that are new, unfamiliar, unusual or unique. Such aspects constitute the quality of novelty.”

The organisations made the application as neutral parties and experts to assist the court to be better abreast with novel areas that potentially contribute to the development of the law. 

The joint brief seeks to help court fully grasp the potential impact of the national digital ID program on online and offline rights including the right to privacy, the right to freedom of expression, as well as intersecting economic, social, and cultural rights by providing expert evidence at national, sub regional, regional, and international levels. It also explains how the digital identity system might contribute to excluding citizens from basic access to services, thereby leaving them in a vulnerable state.  

The case challenging the ID system was filed by the Initiative for Social and Economic Rights,  Unwanted Witness, and Health Equity and Policy Initiative, against the Ugandan Attorney General and the NIRA. The NIRA is the body charged with creating and managing the National Identification Register by registering births, deaths, citizens and non-citizens. 

In its affidavit in support of the amicus application, CIPESA argued that as an expert in  advancing internet freedom and governance, civic participation, and data governance, it saw the need to intervene as a friend of court, in public interest and the interest of justice, to promote and protect human rights.

According to CIPESA’s Legal Officer, Edrine Wanyama, the ruling to hear the opinions of the expert organisations could help in shaping new and emerging areas of the law in Uganda on the need to respect privacy and other rights in the deployment of digital technologies in public digitalisation programmes, including initiatives like the Digital ID.

“This is a demonstration of the commitment of the courts to remain open to new and emerging knowledge and jurisprudence and to receive expert opinions on how to protect citizens from potential harms associated with the use of technology,” said Wanyama. 

CIPESA anticipates that the court will draw considerable knowledge from the amicus submissions and reach a decision that ensures that the roll-out of the digital ID system does not serve as a tool for exclusion but as an inclusion tool for all persons in accessing social and economic services.

Access Now, ARTICLE 19, and CIPESA aim to continue offering the court expert views that could help to ensure that the digital ID system is implemented in a manner that respects minimum human rights standards and promotes and protects rights and freedoms.

Boosting Web Accessibility for Persons with Disabilities in Mozambique

By CIPESA Staff Writer |

In March 2021, accessibility testing on more than 90 public and essential services websites in Mozambique revealed various barriers preventing individuals with visual, hearing, physical or cognitive impairment from fully engaging with the web. Among the most common barriers  were low colour contrast, the absence of “alt text” for images, lack of landmarks to identify regions of a page, non-apparent links, and the lack of descriptive text for interactive elements. The findings of the investigation, which was conducted using the Web Content Accessibility Guidelines 2.0 and 2.1 (WCAG 2.0 and 2.1), informed a web accessibility campaign to push for accessible and inclusive websites in Mozambique. 

Two years on, the campaign that was initiated by the Forum de Organizacoes de Pessoas com Deficiencia (Mozambique Disabled Persons Organisations Forum (FAMOD), with support from the Africa Digital Rights Fund (ADRF), has directly engaged web content creators, designers and developers on web accessibility through open source tools and an open access library for accessible web design components. 

As part of the initiative, FAMOD developed a resource library for accessible website designs based on the WCAG 2.0 guidelines. The library includes web accessibility standards; guidelines and checklists; code inspection and validation; as well as tools for colour contrast, screen reading and document formats. The library also includes information on courses and certification in accessible website design. 

Based on the library, two startups – one in construction and the other in catering – were supported to develop accessible websites. The two websites were tested for compliance and their success fed into the design of templates (available in the library) that can be easily adopted by other web designers. 

In the spirit of “Nothing About Us Without Us”, the development of the library and all its resources actively involved persons with different types of disabilities and using a diverse range of assistive devices. “It is a responsive solution to the challenges identified in the 2021 investigation and the wider exclusion of persons with disabilities online,” said Amicalr Paco, the IT Manager and Data Engineer at FAMOD. 

Other interventions have included a Hackathon with nine developer teams, and two stakeholder workshops on digital accessibility, which were held with the Mozambican Ministry of Science and Technology.

Nonetheless, there is a need for more engagements. Paco noted that the library and resources are not an end in themselves and that continued dialogue and skills development among technologists were necessary to promote awareness and understanding of accessibility and compliance in digital tools and platforms. 

The ADRF is an initiative of the Collaboration on International ICT Policy for East and Southern Africa (CIPESA). Launched in April 2019, the ADRF supports advocacy, skills development, and movement building to effectively influence policy and practise for digital rights protection in Africa by offering flexible and rapid response grants. To-date, USD 649,000 has been disbursed to 52 beneficiaries across 39 African countries. 

Read more about how CIPESA is Working On Advancing Digital Inclusion for Persons With Disabilities in Africa.

#Tech4Equality: Advocating for Gender Inclusive ICT Policy and Governance

By Alice Aparo |

On March 8, 2023, the International Women’s Day (IWD) will be commemorated globally under the theme “DigitALL: Innovation and technology for gender equality”. Set to recognise and celebrate women and girls who are championing the advancement of transformative technology and digital education, the day will explore the impact of the digital gender gap on widening economic and social inequalities. This year’s IWD will also spotlight the importance of protecting the rights of women and girls in digital spaces and addressing online and technology-facilitated gender-based violence.

Across Africa, the digital gender gap has remained a constant concern. This has impacted the potential of women and girls to be active digital citizens. Despite the promise of inclusion offered by technology, African women remain on the lower rungs of internet access and use. Further, while some national strategies attempt to address increased gender equality in internet access, this cannot be achieved where progressive policies – including policies which uphold women’s safety online – are not being implemented.

The International Telecommunications Union (ITU) notes that if women are unable to access the internet and do not feel safe online, they are unable to develop the necessary digital skills to engage in digital spaces. This also diminishes their opportunities to pursue careers in science, technology, engineering, and mathematics (STEM). Although women comprise half the world’s population, they are grossly underrepresented in STEM careers. The United Nations (UN) reiterates this and adds that “bringing women into technology results in more creative solutions and has greater potential for innovations that meet women’s needs and promote gender equality”. Their lack of inclusion, by contrast, comes with massive costs. This calls for more policy efforts, investment and advocacy that advances women and girls in innovation and technology, particularly in Africa.

According to the Harvard Business Review, only 2.3% of venture capital funds globally were invested in women’s tech startups in 2020 – far less than the funds invested in men’s startups. This move is against the United Nation Sustainable Development Goal 5 which aims to achieve gender equality and empowerment of all women and girls, and Goal 9 which focuses on building resilient infrastructure, promoting inclusive and sustainable industrialization, and fostering innovation.

Empowering women and girls through the provision of meaningful access to the internet and digital technologies can enhance the realisation of Sustainable Development Goal 5 to achieve gender equality and the empowerment of women and girls. Further, building their digital skills and awareness levels could undoubtedly provide them with opportunities to start businesses, and to access education, health, social and financial services. Also, it could be a powerful tool to enable women and girls to realise their rights, participate in governance and decision-making processes, freely associate, assemble, and express themselves on issues that are important to them, and develop relevant content for their empowerment. In addition, increasing women’s representation in leadership and decision-making roles within the ICT sector will also remain a critical need.

Webinar

In commemoration of this year’s IWD, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) will host a webinar to discuss what is shaping and influencing the innovation and technology landscape in Africa and what needs to be done to advance gender Inclusive ICT policy and governance.

When: Friday, 10 March 2023
Time: 11:30 (EAT)
Where: Zoom (Register)

This initiative builds on past CIPESA work documenting and aimed at addressing the inclusion of women in the digital society including through advocating for improved affordability, access to information, political participation, media representation and safety online.