Zambia’s Mixed Record on ICT Access and Free Expression Online

By Ashnah Kalemera |
The first-ever Lusaka Internet Forum (LIF17) was hosted in Zambia’s capital on May 10-11 as a platform for discussing the various factors impacting internet use in the country, particularly in driving agricultural sustainability, gender equality and freedom of expression online.
The southern African country presents a mixed record: ICT access is growing (a mobile phone penetration rate of 75% and internet penetration rate of 32%), but is undermined by high data and voice usage costs that entrench the digital divide between men and women and between rural and urban areas. Moreover, while the country is investing in extending services to rural and underserved areas, national laws largely undermine free expression and the communications regulator is criticised for undermining citizens’ rights to free expression.
In the last two decades, Zambia has recorded some firsts on internet use – both positive and negative. In 1996, one of the first documented acts of government censorship of online content in Africa happened when Zambia’s government ordered the take down of content from the online edition of The Post newspaper, after threatening to prosecute the country’s main Internet Service Provider (ISP), Zamnet.


The content was banned under the Preservation of Public Security Act for allegedly containing a report based on leaked documents that revealed secret government plans for a referendum on the adoption of a new constitution. A presidential decree warned the public that anyone caught with the banned edition, including the electronic version, would be liable to prosecution.
Since 1996, a number of interruptions to online communication have been reported. Access to some online news outlets, such as the Zambia Watchdog, has been blocked at different intervals, particularly between 2012 and 2014, over publication of content critical of the government. This alongside physical intimidation, arrests and seizure of devices such as journalists’ laptops and mobile phones. Meanwhile, in August 2016, internet connectivity interruptions were reported during the election period but these could not be verified as deliberately orchestrated by the state or service providers.
Despite these affronts to freedom of expression, in 2014 Zambia was the first African country to implement Facebook’s Free Basics initiative that allows users to access prescribed sites without the need for data. Ongoing initiatives by the Zambia Information and Communication Technology Authority (ZICTA) to promote access include the establishment of ICT training centres, acquisition of equipment for ICT-based learning and examinations under the education ministry, and the development of a computer assembly plant.
This mixed record on ICT access and internet freedom formed the backdrop of the discussions at LIF17, during which participants cited gender barriers, high illiteracy and poverty levels, and high data costs as undermining internet use in the country.


Some participants stated that the country’s laws appear to target curtailing citizens’ rights, and faulted the regulator for lacking independence and failing to protect users from abuses by service providers and government agencies such as the police. “Let’s use the laws progressively not to block access to information or to [unjustifiably] control how the media work,” said a blogger. He noted that the ICT Act of 2009 does not speak to current realities, with some of its provisions criminalising freedom of expression.
There are also widespread perceptions of unwarranted surveillance of citizens’ online communications. The right to privacy is threatened by the mandatory registration of SIM cards provided for under the ICT Act and the Statutory Instrument on the Registration of Electronic Communication Apparatus of 2011. Registration requires subscribers to provide their personal details and identity cards, in the absence of a data protection and privacy law.
The Electronic Communications and Transactions Act of 2009 provides for lawful interception of communications upon issuance of a court order, and online monitoring of information in the public domain. Nearly 15 years since tabling a draft freedom of information bill, it is yet to be enacted.
Meanwhile, activists criticised the Independent Broadcasting Authority (IBA) director general for misusing their extensive powers to curtail media freedom. Last August, the IBA suspended the broadcasting licences for Muvi TV, Komboni Radio and Itezhi Tezhi Radio for “unprofessional conduct posing a risk to national peace and stability”. Activists also reported increasing attacks on individuals who use radio and TV stations to voice opinions critical of the government.
As such, following the LIF17, CIPESA led an ICT policy training workshop for human rights defenders, activists, media and social media enthusiasts to increase their understanding of relevant ICT policies in Zambia and how these affect human rights online. The workshop entailed developing their strategies in advocating for a free, open and secure internet through the innovative use of both traditional and new media.
During the training, participants were taken through mechanisms for policy engagement such as stakeholder submissions, the analysis of bills and continued activism and campaigns online including through documentation and reporting of internet freedom violation incidents.


LIF17 was organised by the Swedish Embassy in Zambia and partners including the Zambia Governance Foundation as a satellite event in the lead up to the Stockholm Internet Forum. Thematic sessions on agriculture, gender, and freedom of expression were hosted by the technology innovation hub Bongo Hive, the Asikana Network, the Swedish Programme for ICT in Developing Regions (Spider) and CIPESA.
Read more about internet freedom in Zambia in CIPESA’s State of Internet Freedom in Zambia 2016 report.
CIPESA’s work in Zambia is supported by AccessNow and the Mozilla Foundation.
 

CIPESA Presents Proposals on Access to Information Law to Uganda Parliament’s ICT Committee

By Juliet Nanfuka |
The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) has met members of the ICT Committee of the Parliament of Uganda and presented proposals for more effective implementation of the Access to Information Act of 2005 and for amendments to this law in order to enhance citizens’ access to public sector information.
During the April 7 engagement, it emerged that the access to information law remains largely unknown, misinterpreted and unimplemented, thus fueling the gap in the amount of information held by the state available to citizens. Consequently, civic participation in governance, monitoring of service delivery as well as transparency and accountability in government, is undermined.
In 2005, Uganda enacted the Access to Information (ATI) law which granted citizens the right to access information held by the state. However, in the 12 years that have since elapsed, there are few cases to show utilisation of the law by citizens, and indeed the state.

Article 41 the Uganda constitution, states: “Every citizen has a right of access to information in the possession of the State or any other organ or agency of the State except where the release of the information is likely to prejudice the security or sovereignty of the State or interfere with the right to the privacy of any other person.”

Mary Paula Turyahikayo, chairperson of the ICT Committee, said the committee has worked to ensure that the necessary laws and infrastructure such as the national backbone infrastructure (NBI) project are in place to enable more citizens to access the internet.
Despite these measures, citizens’ access to vital information remains a big challenge, with the access to information law hardly implemented.


The ATI law requires every minister to make an annual report to parliament on the number information requests they received, indicating granted or rejected requests and reasons for rejection. However, no ministry has ever presented such a report. Moreover, at a workshop held last March for government information officers, it emerged that many of them are not aware of this obligation.
Silas Aogon, the Member of Parliament for Kumi Municipality, noted, “We have never seen any report to parliament on how the MDAs [Ministries, Departments and Agencies] are giving information to those who want to access it.  I had never thought about asking for it until now.”

On March 15 and 16, CIPESA hosted 12 Information Officers from 15  MDAs in a dialogue on some of the challenges faced by MDAs to implement ATI and training on the use of the online information portal www.askyourgov.ug.  This was followed by a workshop on April 7 during which a position paper on the Right to Information in Uganda was presented to Members of Parliament on the ICT Committee. The meeting was attended by 17 individuals including seven MPs, six journalists and four members of the Greater North Parliamentary Forum.

Ultimately, for the right to access information to be realised in Uganda, including meaningful implementation of the law, parliament needs to play an active oversight role. Indeed, while some MPs may not be conversant with the ATI law, they recognise the importance of citizens’ access to information for good governance. This was echoed by Abigaba Cuthbert, MP of Kibale County in Kamwenge district, who stated, “With increasing corruption, access to information is critical. We cannot talk about transparency without access to information.”


Accordingly, the CIPESA position paper on the State of Access to Information in Uganda makes several recommendations, the first being that parliament should use its oversight role and compel all public bodies to comply with section 43 of the Act which requires every minister to submit an annual report to parliament on requests for records or access to information made to a public body under his or her ministry. This will ensure that each ministry and the different agencies under it submit annual reports on the status of access to information.
Below are some of the other recommendations:

  • Government ministries, departments and agencies should develop manuals containing descriptions, addresses, nature of work and services, how to access information and persons to consult as stipulated in section 7 (1), (2) and (3) of the Access to Information Act.
  • Government should fast-track and operationalise the Digital Repository Centre for proper storage and accessibility of government records. This will serve to ensure the digitisation of information and more efficient information record keeping, management and release.
  • There also remains a need for the ATI Act to be amended, specifically to:

See the full list of recommendations: State of Access to Information in Uganda

South Africa to host Forum on Internet Freedom in Africa

Save The Date Announcement |
The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and the Association for Progressive Communication (APC) are happy to announce the date and location for the Forum on Internet Freedom in Africa (FIFAfrica) 2017.
This year’s edition of the Forum will held be in Johannesburg, South Africa, on September 27-29, 2017,  thus expanding the physical footprint of the Forum which has since inception in 2014 been held in Kampala, Uganda.
This landmark event convenes various stakeholders from the internet governance and online rights arenas in Africa and beyond to deliberate on gaps, concerns and opportunities for advancing privacy, access to information, free expression, non-discrimination and the free flow of information online.
The Forum brings together human rights defenders, journalists, government officials, private sector players, global information intermediaries, bloggers, developers, the arts community, law enforcers and regulators – all of whom have a role to play in advancing internet freedom in Africa.
Highlights at FIFAfrica include the launch of the annual State of Internet Freedom in Africa research report as well the commemoration of the International Day for Universal Access to Information (IDUAI) that falls on September 28.
In the coming weeks, we will release more details of the Forum, including how to participate and to suggest topics for inclusion in the event programme.
Visit the Forum page for more information on previous Forums and updates over the coming weeks.
You can also contribute thoughts and ideas through the #InternetFreedomAfrica hashtag.
If you would like to support FIFAfrica17 please get in touch:
Send an email to Wakabi ([email protected]), Ashnah ([email protected]) or Sekoetlane ([email protected]) and ([email protected]) with any queries.
 

Tanzania Court Deals a Blow to Intermediary Liability Rules

By Ashnah Kalemera |
A court in Tanzania has dealt a blow to the rules governing the country’s internet intermediaries, after ruling that requests for disclosure of user information for law enforcement purposes pursuant to the Cybercrimes Act (2015) are not arbitrary. In a March 8, 2017 ruling, three judges of the court in Dar es Salaam also ruled that the absence of regulations to govern the enforcement of the Act did not render the controversial law unconstitutional.
The ruling dismissed a petition filed by Jamii Media, proprietors of the popular Jamii Forums discussion platform, who argued that Section 32 of the Cybercrimes Act was arbitrary and contrary to citizens’ right to privacy guaranteed by article 16 (1) of the country’s constitution. Jamii filed the petition last April, after receiving three notices from police demanding that it discloses the personal details of up to four users who had posted on the forum information on political tensions among members of the ruling party Chama Cha Mapinduzi, and scandals in one of the country’s leading banking institutions.
The notices, issued during January and February 2016 pursuant to Section 32 of the Act, demanded disclosure of the names of the users, their emails and Internet Protocol (IP) addresses. Last December, Jamii Forums founder Maxence Melo was charged with obstruction of investigations under Section 22 of the Cybercrimes Act for failure to comply with the disclosure notices.

Section 32 of the Cybercrimes Act provides:
(1) Where the disclosure of data is required for the purposes of a criminal investigation or the prosecution of an offence, a police officer in charge of a police station or a law enforcement officer of a similar rank may issue an order to any person in possession of such data compelling him to disclose such data.
(2) The order issued under subsection (1) shall be granted to a law enforcement officer who shall serve the order to the person in possession of the data.
(3) Where the disclosure of data cannot be done under subsection (1), the law enforcement officer may apply to the court for an order compelling:
(a) a person to submit specified data that is in that person’s possession or control; or
(b) a service provider offering its services to submit subscriber information in relation to such services in that service provider’s possession or control.
(4) Where any material to which an investigation relates consists of data stored in a computer system or device, the request shall be deemed to require the person to produce or give access to it in a form in which it is legible and can be taken away.

In its petition, Jamii Media argued that no procedures were in place to enforce Section 32 as required under Section 39 (2) of the Act to govern the circumstances and procedure of disclosure by intermediaries. Section 39 (2) states that the Minister for Information and Communication Technology shall “prescribe the procedures for service providers to avail competent authorities, at their request, with information enabling the identification of recipients of their services”.
However, the judges noted that, often, for laws that provide for putting in place regulations by the Ministers responsible, “it takes a while before the said regulations are formulated.” This implied that intermediaries were obliged to honour disclosure notices in the absence of the regulations.
In their defense, the Tanzania Police argued that they had the duty to carry out investigations and prosecution of offences and maintained that the disclosure notices issued to Jamii Media were “justified”. According to the state attorney, the disclosure notices did not infringe upon citizens’ right to privacy because they were “intended to obtain the names of people who have published information that may turn out to be relevant to some offences under investigation”. The state attorney added that the Cybercrimes Act did not require the police to disclose to the recipient of the disclosure notices the offences under investigation.
Meanwhile, Jamii Media also argued that under sub-section 32 (4), the 2015 Act confers powers upon authorities to require the surrender of devices on which information is contained, without any safeguards. “If an investigator takes away one such device in order to access one piece of information relevant to a particular investigation, there is no guarantee that by taking the same, the investigation will not access other pieces of information contained in the same device and [which are] irrelevant to the matter being investigated,” it argued.
Judges ruled that Section 32 (4) did not empower the police to take away the devices as contended. “Our understanding of that section is that the person to whom the request has been made, like the petitioner in this case, may print the information such that it can be read and/or taken away by the investigators in printed form,” the judges stated.
Citing jurisprudence including provisions under Article 19 (2) and (3) of the International Covenant on Civil and Political Rights, the judges considered that Section 32 of the Cybercrimes Act was “proportional” for balancing individual human rights on the one hand and public interest on the other.
Lawyers representing Melo in the ongoing case plan to file submissions for police to seek court’s intervention for mandatory disclosure pursuant to provisions of the Act and dismiss the obstruction charges.
For more on the government’s tactics to stifle citizens’ digital rights in Tanzania see the State of Internet Freedom in Tanzania 2016 report.
 

Recent Developments in Telecoms Regulation Threaten Online Rights in Uganda

By Edrine Wanyama |
In April 2017, the parliament of Uganda gave the minister in charge of Information and Communication Technologies (ICT) powers to single-handedly make regulations that govern the telecommunications sector. Hitherto, regulations proposed by the minister had to receive parliamentary approval.
The Uganda Communications (Amendment) Bill (2016), which parliament passed on April 6, 2017, means that making regulations for the telecommunications sector is in the sole preserve of the minister. Among others, such regulations are related to licensing and fees, operator obligations, competition, consumer rights and protection. It is for this reason that the newly passed law, which was gazzetted back in February 2016 when still a bill faced criticism from civil society.

The Minister may, after consultation with the Commission and with the approval of Parliament, by statutory instrument, make regulations for better carrying into effect the provisions of this Act.” Section 93(1) of the Uganda Communications Act 2013

  “The Minister may, after consultation with the Commission, by statutory instrument, make regulations for better carrying into effect the provisions of this Act.” Section 93(1) of the Uganda Communications (Amendment) Bill (2016)

The authority, Uganda Communications Commission (UCC), was set up in 1997 by the now repealed Communications Act, Cap. 106 (section 3) and now established by the Uganda Communications Act, 2013 (section 4) (the Act)  as the regulator of the communications sector but has since inception faced criticism over lack of independence from the government. The Act gives extensive powers to the minister of ICT, including to appoint the commission’s executive director and board members and to approve its budgets.

Meanwhile, there are growing concerns about mass surveillance particularly in the absence of a data protection and privacy  law to safeguard citizen data collected by the state and private parties. These are further aggravated by the haphazard implementation of laws which have an impact on citizens’ communications.
On April 12, 2017, the telecom industry regulator Uganda Communications Commission (UCC) announced a seven-day deadline for subscribers to update their registration details using national identity (ID) cards in a move reportedly to address cybercrime. Mandatory SIM card registration has been in force since March 2012. At the time of the original deadline for conclusion of the exercise in August 2013, the commission reported that 92% of SIM cards were registered. However, investigations into past and recent crimes have revealed the continued existence and use of unregistered SIM cards.
The April 12 directive raised concerns about the conflicting requirements for the validation of SIM cards, with subscribers pointing out that various other forms of identification other than a national ID should be recognised. Pursuant to the Regulation of Interception of Communications Act 2010, Section 9(1), SIM card registration requires the subscriber’s full name, residential address, business address, postal address and identity number as contained in an identity document. Other forms of identification  that have previously been used by subscribers have included employer identity cards, driving licenses, students’ identity cards and passports.
However, following an interim order as well as public statements by the Uganda Law Society and other stakeholders, the Prime Minister issued a directive extending the SIM card verification and validation deadline for a month to May 19, 2017.
The SIM card registration exercise has attracted criticisms from human rights defenders who claim it violates freedom of expression and goes against Article 27 of the Constitution which guarantees the right to privacy by possibly enabling mass surveillance of communications. Further, the absence of a data protection and privacy law continues to expose citizens’ data which is increasingly and now repeatedly being collected by the state. There is accordingly no guarantee that personal data will not be unlawfully processes and used.
Over the past year, national security has been cited as the basis for directives by the UCC including instructions given to telecommunications service providers to enforce two social media shutdowns during 2016.
Although Uganda has signed and ratified the African Charter on Human and Peoples Rights and also fully subscribes to the international bill of rights, specifically the Universal Declaration for Human Rights and the International Covenant on Civil and Political Rights there are repeated affronts to the rights enshrined in these instruments.
It is for this reason that the Collaboration on International Policy for East and Southern Africa (CIPESA) calls for the following actions to be taken:

  1. The Government should adopt a multistakeholder approach in decisions affecting the ICT industry in Uganda. Decisions that affect the rights of citizens should be evidence-based and reached in consultation with other stakeholders including academia, civil society, media and the private sector.
  2. The Parliament should immediately pass the Data Protection and Privacy Bill, 2015 subject to the proposed amendments from the citizenry.
  3. Government should harmonise the implementation of laws pertaining to registration of data of citizens, refugees and non-citizens in Uganda, including the Regulation of Interception of Communications Act (2010) and the Registration of Persons Act (2015).
  4. There is a need to reinstate the oversight role of the Parliament over the Minister for ICT in making regulations for the ICT sector. Failure to do so will leave excessive powers within the ambit of the minister and resultantly, lead to abuse.

Read more on the State of Internet Freedom Uganda 2016.