South Sudan’s Cybercrimes and Computer Misuse Order 2021 Stifles Citizens’ Rights

By Edrine Wanyama |

South Sudan has enacted the Cybercrimes and Computer Misuse Provisional Order 2021 aimed to  combat  cybercrimes. The country has a fast-evolving technology sector, with three mobile operators and 24 licensed internet service providers. Investments in infrastructure development have propelled internet penetration to 16.8% and mobile phone penetration to 23% of the country’s population of 11.3 million people, which necessitates a law to curb cybercrime.

The Order is based on article 86(1) of the Transitional Constitution of South Sudan 2011, which provides that when parliament is not in session, the president can issue a provisional order that has the force of law in urgent matters.

The Cybercrimes and Computer Misuse Order makes strides in addressing cybercrimes by extending the scope of jurisdiction in prosecuting cybercrimes to cover offences committed in or outside the country against citizens and the South Sudan state. The Order also establishes judicial oversight especially over the use of forensic tools to collect evidence, with section 10 requiring authorisation by a competent court prior to collecting such evidence. Furthermore, the Order attempts to protect children against child pornography (section 23 and 24), and provides for prevention of trafficking in persons (section 30) and drugs (section 31).

However, the Order is largely regressive of citizens’ rights including freedom of expression, access to information, and the right to privacy.

The Order gives overly broad definitions including of “computer misuse,” “indecent content,” “pornography,” and “publish” which are so ambiguous and wide in scope that they could be used by the state to target government opponents, dissidents and critics. The definitions largely limit the use of electronic gadgets and curtail the exercise of freedom of expression and access to information.

Article 22 of the Transitional Constitution of South Sudan 2011 guarantees the right to privacy. The country has ratified the International Convention on Civil and Political Rights (ICCPR) that provides for the right to privacy under article 17 and the African Charter on Human and Peoples Rights, whose article 5 provides for the right to respect one’s dignity, which includes the right to privacy. The Order appears to contravene these instruments by threatening individual privacy.

Despite a commendable provision in section 6 imposing an obligation on service providers to store information relating to communications, including personal data and traffic data of subscribers, for 180 days – a period far shorter compared to other countries – personal data is still potentially at risk. The section requires service providers and their agents to put in place technical capabilities to enable law enforcement agencies monitor compliance with the Order. With no specific data protection law in South Sudan and without making a commitment to the leading regional instrument, the African Union Convention on Cyber Security and Personal Data Protection, privacy of the citizens is at stake.

The section on offences and penalties lacks specificity on fines which may be levied on errant individuals or companies. On the other hand, some of the offences provided for under the Order potentially curtail freedom of expression and the right to information. For instance, the offence of spamming under section 21 could be interpreted to include all communications through online platforms including social media platforms like Facebook and WhatsApp. Under the provision, virtually all individuals who forward messages on social media stand the risk of prosecution. This also has a chilling effect on freedom of expression and the right to information.

The offence of offensive communication under section 25 potentially has a chilling effect on freedom of expression, media freedom and access to information. A similar provision under section 25 of the Computer Misuse Act, 2011 of Uganda has been widely misused to persecute, prosecute and silence political critics and dissidents. Section 25 of the South Sudan Cybercrimes Order could be used in a similar manner to target government critics and dissidents. 

In CIPESA’s analysis of the Order, we call for specific actions that could ensure the prevention of cybercrime while at the same time not hurting online rights and freedoms, including:

  • Deletion of problematic definitions or provisions from the Order.
  • Enactment of a specific data protection law to guarantee the protection of data of individuals.
  • Urgent drafting of rules and regulations to prescribe the procedures for implementing the Order.
  • Ratification of the African Union Convention on Cyber Security and Personal Data Protection.
  • Service providers should not be compelled to disclose their subscribers’ information to law enforcement agencies except on the basis of a court order.
  • Amendment of the Order to emphasise the oversight role of courts during the processes of access, inspection, seizure, collection and preservation of data or tracking of data under section 9.

Read the full analysis here.

CIPESA Working On Advancing Digital Inclusion for Persons With Disabilities in Africa

By Staff Writer |

Persons with disabilities have unique needs and have for long been disadvantaged, yet the more some African countries get digitally connected, the deeper the digital divide for this community seems to grow. Despite growth in Information and Communications Technology (ICT) penetration, a large section of persons with disabilities faces digital exclusion due to lack of access and affordability of the requisite ICT tools and equipment, and failure by telecommunication operators to provide information and services in disability-friendly formats.

While millions turned to technology and traditional media for information in the wake of the Covid-19 pandemic, critical messages about the disease that are disseminated by health authorities, telecom companies, and broadcasters were and still are not reaching persons with visual and hearing impairments.

In turn, the digital exclusion of persons with disabilities worsened with the Covid-19 pandemic yet the Covid-19 crisis rendered technology key to working, learning, political participation and the enjoyment of other rights. Yet few organisations, within and outside the digital rights movement, are pushing for greater ICT accessibility.

These gaps in access to information gaps are growing despite the International Disability Alliance (IDA) issuing key recommendations towards a disability-inclusive Covid-19 response, including the requirement that persons with disabilities must receive information about infection mitigating tips, public restriction plans, and the services offered, in a diversity of accessible formats with use of accessible technologies.

The Collaboration for International ICT Policy for East and Southern Africa (CIPESA), is working to raise the availability of information on ICT and disability in Africa by producing relevant evidence-based research; mainstreaming disability rights issues in conversations about technology access and digital rights; growing the capacity of diverse actors to research on and advocate for meaningful connectivity and digital accessibility, and engaging key actors such telecom companies and regional bodies.

What CIPESA is doing is quite powerful and empowering. The tool is excellent, it needs to be worked on as we’ve given our input in the meeting. Once that is done, reaching out and creating awareness about the tool will be more powerful, engaging such stakeholders such as government and other key stakeholders. Once it is out this is going to be a game-changer because for persons with disabilities, ICT makes the world go round … This has been one of the first meetings on ICT and disabilities, so it is an excellent move. – Erick Ngondi, United Disabled Persons of Kenya

Here are some of our blogs and in-depth research reports on technology and persons with disabilities in Africa.

Blogs

  1. Why Access to Information on Covid-19 is Crucial to Persons with Disabilities in Africa
  2. Placing ICT Access for Persons with Disabilities at the Centre of Internet Rights Debate in Kenya
  3. CIPESA Submits Comments to Uganda Communications Commission on Improving Access to ICT for Persons With Disabilities
  4. Calling Out the African Union and Telecoms Associations to Prioritize ICT Access for Persons with Disabilities
  5. Vodacom Outshines MTN in Efforts to Serve Persons With Disabilities in South Africa
  6. People With Disabilities Left Out in ICT Jamboree
  7. Governments and Donors Urged to Advance ICT Access for Persons with Disabilities
  8. Telcos in Nigeria and Kenya Should Address Exclusion of Persons With Disabilities
  9. CIPESA Endorses GSMA Principles to Drive Digital Inclusion of Persons With Disabilities
  10. Fighting for plight of persons with disabilities

Research Reports

  1. Assessing the Barriers to Accessing ICT by People with Disability in Tanzania
  2. Assessing the Barriers to Accessing ICT by People with Disability in Uganda
  3. Assessing the Barriers to Accessing ICT by People with Disability in Kenya
  4. Removing Barriers to ICT Accessibility for Persons with Disabilities in  Kenya, Tanzania and Uganda which identified needed actions by government, regulators and communication companies.
  5. Access Denied: How Telecom Operators in Africa Are Failing Persons With Disabilities. CIPESA assessed 10 telecom companies in five countries (Botswana, Kenya, Nigeria, South Africa, and Uganda). Most of them – despite being long-established operators with a majority market share in their respective countries – were found to have failed to meet their obligations to provide information and services to persons with disabilities, in contravention of the companies’ obligations under national laws and the CRPD.

CIPESA made submission to the AUC, the ATU and EACO, drawing attention to these organisations’ obligation to protect and advance the rights of persons with disabilities in line with the African Charter on Human and Peoples’ Rights; the CRPD; the Treaty to Facilitate Access to Published Works for Persons Who Are Blind, Visually Impaired or Otherwise Print Disabled (the Marrakesh Treaty); the SDGs; and the Protocol to the African Charter on Human and Peoples’ Rights on the Rights of Persons with Disabilities in Africa.

See an in-depth document about our work here.

Watch this insightful discussion on “The Role of the Media in Promoting Digital Rights for  Persons With Disabilities in Africa.

How Weaponization of Network Disruptions During Elections Threatens Democracy

By Evelyn Lirri |

In August 2021, Zambia became the latest country to restrict citizens’ access to social media platforms including Facebook, Twitter and WhatsApp as the country went to the polls. Citing the need to stop the spread of election misinformation, the Zambian government disrupted the internet in an election that saw an opposition politician defeat the incumbent president.

The disruption of digital communications is a recurring theme in numerous countries in as states pursue their ambitions of controlling information and communication flow during elections and other times of public protest.

Between January and May 2021, digital advocacy group Access Now documented at least 50 internet shutdowns in 21 countries, including in several African countries like Uganda, Ethiopia, Nigeria, Niger and Congo Brazzaville. However, there has also been pushback against these shutdowns by various civil society and digital rights actors, alongside users turning to Virtual Private Networks (VPNs) to circumvent blockages.

At the eighth edition of the Forum on Internet Freedom in Africa (FIFAfrica) that was hosted by the Collaboration on International ICT for East and Southern Africa (CIPESA) from September 28-30, 2021, members of the KeepItOn coalition, a global movement to end internet shutdowns, shared experiences from various countries on How Weaponization of Network Disruptions During Elections Threatens Democracy and some of the actions taken to prepare and advocate against election-related shutdowns.

Susan Mwape, an Election Analyst and Executive Director of Common Cause-Zambia, noted that in the lead up to the August 2021 elections in Zambia, the government imposed restrictions on public gatherings in the name of enforcing Covid-19 prevention measures. Consequently, citizens resorted to digital platforms to engage in election-related issues.

Threatened by the increased online engagement and mobilisation, the government hurriedly adopted the Cyber Security and Cyber Crimes Act, 2021. The Act was passed amidst criticism that it was primarily aimed at policing cyberspace, gagging freedom of expression and speech, and stifling internet use by opposition groups and supporters ahead of the general elections.

See this CIPESA analysis: Implications of Zambia’s  Cyber Security and Cyber Crimes Act 2021 on Digital Rights

Anticipating a shutdown ahead of the elections, Mwape said capacity building and advocacy activities were conducted  in collaboration with the KeepItOn coalition.

“We trained over 70 people – civil society, journalists, citizens and frontline defenders on secure tools they could use to stay online. But we also wrote an open letter to the President on why it was important to keep the internet on,” Susan Mwape.

Capacity building in circumvention techniques in anticipation of shutdowns has become a common strategy across the world. In Iraq, Hayder Hamzoz, the Founder and Chief Executive Officer of INSM Network, said efforts in this regard not only cover use of specific tools but prior installation of applications to overcome “governments’ first course of action” which is often to disable application stores where circumvention tools can be accessed.

Indeed, this was the case in Uganda, which has experienced various forms of election-related network disruptions – the most recent being a total shutdown during the January 2021 general elections and an ongoing block on Facebook access.

Allan Ssempala Kigozi, the Head of Legal Affairs at Unwanted Witness, explained that while a shutdown was anticipated in the country, civil society actors held a number of engagements with telecommunications companies and regulators on the need to keep the internet on.

“We wanted the government to understand that as the country was heading to the polls, an internet shutdown should not be the way to go because it has a wide-ranging impact on the economy beyond the misinformation that the government says it was trying to avert,” said Kigozi. He further noted that despite the shutdown, there was still an opportunity for misinformation to flow through text messages and added that upon the reinstatement of access, recorded videos and photos were shared thus maintaining the misinformation.

Despite having a long history of disruptions, Chad last April held an election without disrupting the internet. Abdeldjalil Bachar Bong, the Founder and Chief Executive Officer of House of Africa in Chad, attributed this to advocacy campaigns including by the #KeepItOn movement, which wrote an open letter to the President and telecommunications providers on the importance of keeping the internet on.

“We told them that shutting down the internet is not a solution. The solution is to educate the public on the benefits of using the internet,” he said. This was complemented by skills and knowledge building efforts targeting human rights defenders and civil society on how to use circumvention tools in the event of a shutdown.

For their part, circumvention tools developers such as TunnelBear have worked with digital rights groups and activists to ensure access to their platform in the event of a shutdown including through providing free bandwidth to use TunnelBear. Shames Abdelwahab, the Advocacy and Community Manager at TunnelBear, noted that in countries where they have done this, there has been a huge spike in the usage of the service. TunnelBear also provides free VPN accounts to activists on the ground. “The aim is to ensure digital activists keep online as they advocate against internet shutdowns,” said Abdelwahab.

Manson Gwanyanya, a researcher with the Business and Human Rights Resource Centre, noted that with increasing cases of internet shutdowns happening across the globe, more efforts including increased company transparency are being made to ensure that telecommunication companies and internet service providers are held accountable for their actions.

Blocking the internet ahead of the elections undermines electoral transparency, severely hinders the work of journalists, and denies citizens’ access to badly needed information. Governments should thus ensure the internet remains open to provide an opportunity for opposition actors to reach the electorate with information and for a pluralistic media to flourish.

Putting Digital Inclusion Data into Practice

By Prudence Nyamishana |

Trends in global digitalisation have seen strides in the use of technology as an enabler for economic growth, public discourse, service delivery, transparency and accountability, access to education and public health. However, alongside these advancements, there has remained a persistent digital access gap that predominantly affects Sub-Saharan Africa.

Further, it appears that even for those countries in the region with high levels of access to digital technologies, there remain inconsistencies at national level, including in policy formulation and practice, and the business ethics and human rights of mobile network operators, which potentially exacerbate digital exclusion.

According to the International Telecommunications Union (ITU), global 4G coverage stood at 84% in comparison to 44% in Africa  – the lowest across all regions. 

In 2020, four of Africa’s leading digital companies (Safaricom, Jumia, MTN, and Naspers) were ranked and scored on digital inclusion by the World Benchmarking Alliance (WBA)‘s Digital Inclusion Benchmark. These companies have business footprints in more than numerous countries in Africa.

The Digital Inclusion Benchmark results showed that commitment and contribution towards digital inclusion are highly uneven across industries in the digital sector. Clear and consistent support to improve digital skills is needed, especially for vulnerable and underrepresented groups.

These results echoed similar sentiment in the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) Access Denied report, which showed that several telecom companies in Sub-Saharan Africa have failed to meet their obligations to provide information and services to persons with disabilities.

Both the WBA Benchmark and the CIPESA report call for adjustments to how business should be conducted, with a higher priority placed on the often digitally excluded and underrepresented communities such as women and persons with disabilities.

As such, in June 2021, the WBA and CIPESA hosted a roundtable with stakeholders committed to advancing digital inclusion in the region. Additionally, the roundtable sought to help foster coordinated multi-stakeholder actions on digital inclusion that can help achieve the Sustainable Development Goals (SDGs).

Watch the Africa RoundTable on Digital Inclusion

Speaking at the roundtable, Andrew Rugege, the Africa regional director for the International Telecommunications Union (ITU), noted that Covid-19 had laid bare the realities that underpin global economics and made it evident that broadband and Information and Communications Technology (ICT) play a critical role in daily lives for the overall growth of national economies.

However, Michael Minges, a WBA Research Analyst, highlighted gaps in current internet access policy and structures that affect national economics and also impact digital inclusion and access. He pointed out the issue of scale, noting that many African countries have not yet built up their internet markets to make them attractive for international investors.

Onica Makwakwa, Head of Africa at the Alliance for Affordable Internet (A4AI), highlighted the role that state policies and regulations have to play in enabling digital access. She stated: “We need to have policies and regulations that make this [internet access] universal … It requires intentional actions.”

The shift from data to action was stressed by Lourdes Montenegro, the WBA Lead on Digital Sector Transformation, who noted that the data emerging from research initiatives such as by the WBA and CIPESA triggers thinking on what public policy actions are needed, including by think tanks and governments that need to work towards addressing digital inclusion gaps with evidence-backed data.

Indeed, narratives from the roundtable discussion including the need for more stakeholder collaborations were carried through to the September 2021 CIPESA-hosted Forum on Internet Freedom in Africa 2021 (FIFAfrica). Digital inclusion was one of the themes at FIFAfrica21, and multiple sessions at the Forum entailed discussion on why digital inclusion should be attained including for the benefit of increased public participation, countering misinformation, fighting online violence against women, supporting progressive online movements, and encouraging online diversity especially from the Global South. Thus, as the data in support of digital inclusion grows, so does the need to put this data into practice in policy formation, business strategy and digital rights advocacy.

Watch the different sessions from the Forum.

Stalking the Messenger: Ending Impunity for Illegal Surveillance

Opinion |

We know that the issues around digital surveillance are complicated. The tech side of the tools used and the means to circumvent them are complicated. Drawing a hard line between what may be acceptable to help ensure our personal security and what pushes our societies into Orwellian territory is also complicated.

As the revelations of the Pegasus Project show us, illegal surveillance is the latest weapon in the ever-growing arsenal used against journalists and human rights defenders. In effect, surveillance in this context is equivalent to stalking. A pernicious activity that can easily cross from online harassment to physical attacks. It’s illegal. It disproportionately affects those who are among the most vulnerable, whether because of their gender, sexual orientation, race, or ethnicity. And if people are permitted to stalk with impunity, the problem will not stop.

Increasingly used as a laser-focused tactic, a weapon to intimidate, instil fear, and paralyse the work of journalists, this kind of surveillance puts sources at risk and impedes journalists from providing us with information to expose crime and corruption, and to speak the truth about power.

“I don’t think it’s journalists as individuals that the government has a problem with. The government has a problem with the people […] It wants to continue committing crimes in the shadows so that no one will uncover those facts or ask questions about it. And journalists are the ones who spoil this plan.” — Azerbaijani journalist Sevinj Vaqifqizi.

On this International Day to End Impunity for Crimes Against Journalists, a day advocated for by IFEX, we need to bring surveillance to the fore as a tactic that is threatening journalists’ safety, and draw attention to how impunity creates the conditions under which it will continue to thrive.

IFEX members have long warned of the dangers of malware like Pegasus. A product of the Israeli NSO Group, it infects targets’ phones, exposes data, and even gains access to cameras and microphones. Despite the company’s claim that it vets clients based on their human rights records, it sold Pegasus to authoritarian regimes – as well as to countries like Mexico, where targets included media figures, a government scientist, and international human rights investigators – united by having publicly posed challenging questions to the government.

The personal impact of such surveillance can be devastating.

“When you are speaking, watching, or doing something with someone in your house or in a cafe or wherever you may be, they are there listening to you, watching everything that you do. Everything that you do in your bedroom, the shower, in your kitchen, in your office with your friends, or whoever.” — Mexican journalist Carmen Aristegui: profiled here

“My family members are also victimized. The sources are victimized, people I’ve been working with, people who told me their private secrets are victimized.” — Azerbaijani journalist Khadija Ismayilova: profiled here

Globally, at least 180 journalists were selected as Pegasus targets.

The decades our network has put into promoting journalists’ safety confirm that it cannot be fully achieved in a climate where individuals – or states – can intimidate, threaten, and harm them, and not be held accountable. Year-round, IFEX members work to bring perpetrators to justice, and to establish conditions that will make it harder for them to commit such crimes in the first place.

We know that it is a massive undertaking. In spite of being illegal under international human rights law, actors involved in illegal surveillance are almost never held accountable.

The challenge is to identify where to intervene, where to spend our energy, where we can have the biggest impact in stemming this predatory practice – including, but not limited to, confronting corporations and governments that enable and participate in the illegal surveillance of journalists.

It’s a many-headed beast, surveillance. There are multiple entry points to effect change, from policy work to set boundaries on what is considered ‘necessary and proportionate’ surveillance, to pressuring states to adopt international standards, to controls on the exports of spyware, to supporting preventive measures like strengthening and normalizing encryption.

Ending impunity for illegal surveillance has to be part of this work. It’s a long game, not for the weak-of-heart, and this is even more true when the perpetrators of the crimes are states. But we know from our experience seeking accountability for physical attacks on journalists that this type of sustained work does pay off. Just over a week ago, two decades of advocacy – by IFEX member FLIP, by Jineth Bedoya Lima herself, and by so many others – led to the groundbreaking Inter-American Court of Human Rights ruling in her case that there was “serious, precise and consistent evidence of State involvement in the acts of physical, sexual and psychological torture against the journalist.” This ruling sets an important precedent for the entire region.

The other good news is that we have a lot to draw on, on our side. There is a massive, global network of people – working in different fields, perhaps, or focusing on different issues – but with the combined skills, expertise, and clout needed to ensure that illegal surveillance does not go unchallenged, that those found culpable pay a price, and that this price effectively deters others.

As long as we keep leveraging opportunities like IDEI to come together, collaborate, learn from and support each other, raise our voices and find strategic pressure points where we can have a real impact, we can, and will, counter the scourge of illegal surveillance of journalists.

Annie Game is the Executive Director of IFEX, the global network that promotes and defends freedom of expression and information as a fundamental human right.