Why Digital Security Training Is No Longer Optional for Ugandan Journalists

By Byaruhanga Brian |


Ugandan journalists are increasingly facing intertwined physical and digital threats which  intensify during times of public interest including elections and protests. These threats are compounded by  internet shutdowns, targeted surveillance, account hacking, online harassment, and regulatory censorship that directly undermines their safety and work.  A study on the Daily Monitor’s experience found that the 2021 general election shutdown constrained news gathering, data-driven reporting, and online distribution, effectively acting as digital censorship. These practices restrict news gathering, production, and dissemination and have been documented repeatedly from the 2021 general election through the run‑up to the 2026 polls.

Over the years, CIPESA has documented digital rights violations, challenged internet shutdowns, and worked directly with media practitioners to strengthen their ability to operate safely and independently. This work has deepened as the threats to journalism have evolved.

In recent  months CIPESA has conducted extensive journalist safety and digital resilience trainings across the country, reaching more than 200 journalists from diverse media houses and districts across the country, in the Acholi subregion (Gulu, Kitgum, Amuru, Lamwo, Agago, Nwoya, Pader, and Omoro), Ankole sub region (Buhweju, Bushenyi, Ibanda, Isingiro, Kazo, Kiruhura, Mbarara (City & District), Mitooma, Ntungamo, Rubirizi, Rwampara, and Sheema), Central (Kampala, Wakiso), Busoga Region (Bugiri, Bugweri, Buyende, Iganga, Jinja, Kaliro, Kamuli, Luuka, Mayuge, Namayingo, and Namutumba), and the Elgon, Bukedi, and Teso subregions (Mbale, Bududa, Bulambuli, Manafwa, Namisindwa, Sironko, Tororo, Busia, Butaleja, Kapchorwa, Soroti, and Katakwi).

The trainings aimed to strengthen the capacity of media actors to mitigate digital threats and push back against rising online threats and censorship that enable digital authoritarianism. The training was central to helping journalists and the general media sector to understand media’s role in democratic and electoral processes, ensure legal compliance and navigate common restrictions, buttressing their digital and physical security resilience, enhancing the skills to identify and counter disinformation and facilitating the newsroom safety frameworks for the media sector.

The various trainings were tailored to respond to the needs of the journalists, covering media, democracy, and elections; electoral laws and policies; and peace journalism, with attention to transparent reporting and the effects of military presence on journalism in post-conflict settings.

Meanwhile, in Mbale and Jinja, reporters unpacked election-day risks, misinformation circulating on social media, and the legal boundaries that are often used to intimidate them. Across the different regions, newsroom managers, editors and reporters worked through practical exercises on digital hygiene, safer communication, and physical-digital risk intersections.

CIPESA’s digital security trainings respond to the real conditions journalists work under. The sessions focus on election-day and post-election reporting, verifying information and claims under pressure, protecting sources, and strengthening everyday digital security through strong passwords, two-factor authentication, and safe device handling. Journalists also develop newsroom safety protocols and examine how peace journalism can help de-escalate tension rather than inflame it during contested political moments

One of the most important shifts for the participants,  came from the perspective that safety stopped being treated as an individual burden and started being understood as an organisational responsibility. Through protocol-development sessions, journalists mapped threats, identified vulnerabilities such as predictable routines and weak passwords, and designed “if-then” responses for incidents like account hacking, detention, or device theft. For many journalists, this was the first time safety had been written down rather than improvised.

Beyond the training for journalists, CIPESA hosted several digital security clinics and help desks for human rights defenders and activists. At separate engagements, close to 70 journalists received one-on-one support during a digital security clinic at Ukweli Africa held from the 15 December 2025 including the at the Uganda Media Week. These efforts sought to  enhance their digital security practices. The support provided during these interventions included checking the journalists’ devices for vulnerabilities, removal of malware, securing accounts, enabling encryption, and secure data management approaches.

“Some journalists who had arrived unsure, even embarrassed, about their digital habits, left lighter, not because the risks had vanished, but because they now understood the tools and how to manage risks.”

These engagements serve as avenues to build the digital resilience of journalists in Uganda, especially as the media faces heightened online threats amidst a shrinking civic space.Such trainings that speak the language of lived experience often travel further than any policy alone. In Uganda, where laws can be used to narrow civic space, where the internet can be switched off, and where surveillance blurs the line between public and private, practical digital security becomes a necessity.

By training journalists across Uganda, supporting them through digital security desks, and standing with them during moments like Media Week, CIPESA has helped journalists strengthen their resilience to keep reporting in spite of the challenges and threats they encounter daily.

Applications are Open for a New Round of Africa Digital Rights Funding!

Announcement |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is calling for proposals to support digital rights work across Africa.

This call for proposals is the 10th under the CIPESA-run Africa Digital Rights Fund (ADRF) initiative that provides rapid response and flexible grants to organisations and networks to implement activities that promote digital rights and digital democracy, including advocacy, litigation, research, policy analysis, skills development, and movement building.

 The current call is particularly interested in proposals for work related to:

  • Data governance including aspects of data localisation, cross-border data flows, biometric databases, and digital ID.
  • Digital resilience for human rights defenders, other activists and journalists.
  • Censorship and network disruptions.
  • Digital economy.
  • Digital inclusion, including aspects of accessibility for persons with disabilities.
  • Disinformation and related digital harms.
  • Technology-Facilitated Gender-Based Violence (TFGBV).
  • Platform accountability and content moderation.
  • Implications of Artificial Intelligence (AI).
  • Digital Public Infrastructure (DPI).

Grant amounts available range between USD 5,000 and USD 25,000 per applicant, depending on the need and scope of the proposed intervention. Cost-sharing is strongly encouraged, and the grant period should not exceed eight months. Applications will be accepted until November 17, 2025. 

Since its launch in April 2019, the ADRF has provided initiatives across Africa with more than one million US Dollars and contributed to building capacity and traction for digital rights advocacy on the continent.  

Application Guidelines

Geographical Coverage

The ADRF is open to organisations/networks based or operational in Africa and with interventions covering any country on the continent.

Size of Grants

Grant size shall range from USD 5,000 to USD 25,000. Cost sharing is strongly encouraged.

Eligible Activities

The activities that are eligible for funding are those that protect and advance digital rights and digital democracy. These may include but are not limited to research, advocacy, engagement in policy processes, litigation, digital literacy and digital security skills building. 

Duration

The grant funding shall be for a period not exceeding eight months.

Eligibility Requirements

  • The Fund is open to organisations and coalitions working to advance digital rights and digital democracy in Africa. This includes but is not limited to human rights defenders, media, activists, think tanks, legal aid groups, and tech hubs. Entities working on women’s rights, or with youth, refugees, persons with disabilities, and other marginalised groups are strongly encouraged to apply.
  • The initiatives to be funded will preferably have formal registration in an African country, but in some circumstances, organisations and coalitions that do not have formal registration may be considered. Such organisations need to show evidence that they are operational in a particular African country or countries.
  • The activities to be funded must be in/on an African country or countries.

Ineligible Activities

  • The Fund shall not fund any activity that does not directly advance digital rights or digital democracy.
  • The Fund will not support travel to attend conferences or workshops, except in exceptional circumstances where such travel is directly linked to an activity that is eligible.
  • Costs that have already been incurred are ineligible.
  • The Fund shall not provide scholarships.
  • The Fund shall not support equipment or asset acquisition.

Administration

The Fund is administered by CIPESA. An internal and external panel of experts will make decisions on beneficiaries based on the following criteria:

  • If the proposed intervention fits within the Fund’s digital rights priorities.
  • The relevance to the given context/country.
  • Commitment and experience of the applicant in advancing digital rights and digital democracy.
  • Potential impact of the intervention on digital rights and digital democracy policies or practices.

The deadline for submissions is Monday, November 17, 2025. The application form can be accessed here.

Uganda to Namibia: Biking for Digital Security and Internet Freedom in Africa

By FIFAfrica |

On Friday September 12, 2025, digital security expert and biker, Andrew Gole will set off on a solo motorbike journey spreading awareness about safety and security online. This will be the third time that Gole will travel across various countries on the continent ahead of the annual Forum on Internet in Africa (FIFAfrica). The effort is supported by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), Defend Defenders and Access Now.

Gole will commence his trip in Kampala, Uganda and over a round trip distance of 13,000 kilometers (km) traverse through Kenya, Tanzania, Malawi, Mozambique, Zimbabwe, and Botswana,  culminating in  Windhoek, Namibia, where the 2025 edition of FIFAfrica will convene this September 24-26, 2025. On his return journey to Uganda, Gole will also ride through Zambia and Rwanda, making it a total of 10 countries travelled through over the course of the journey. 

“I am truly excited to be hitting the road once again as part of the upcoming Forum on Internet Freedom in Africa. On my previous trips, I had the privilege of witnessing firsthand how diverse communities warmly embrace digital security as a key practice that empowers and protects their daily lives online and offline. These communities are often those left on the margins of mainstream efforts to enhance digital security, yet their eagerness to adopt these measures have been inspiring. I look forward to engaging with new communities on this trip and to  continuing this important work and deepening these connections as we move forward together.” – Andrew Gole, Digital Security Expert

Gole notes that traveling on his motorbike allowed him the mobility to connect directly with grassroots organisations. His “Digital Security on Wheels” initiative started in 2020 during the Covid-19 pandemic to address urgent digital security concerns beyond urban centers in Uganda and grew into a regional effort across East and Southern Africa through FIFAfrica.

In September 2022, ahead of the Forum which was held in Lusaka, Zambia and also served as the return to in-person meetings following a two year hiatus due to Covid-19, Gole pioneered the the #RoadToFiFAfrica Digital Security campaign. Gole embarked on the ambitious solo motorbike journey traversing approximately 3,300 kilometers.

The following year in 2023, ahead of the Tanzania edition of FIFAfrica, Gole led a major expedition that involved a team doing a round trip covering almost 10,000 km from Uganda through Kenya to Tanzania (and into the Indian Ocean island of Zanzibar via ferry). Gole was once again on his motorbike, supported by a team of digital rights experts from the Defenders Protection Initiative (DPI) in a passenger van.

We applaud Gole’s effort and celebrate the spirit he carries every mile to Windhoek. Andrew’s ride is a testament to the ongoing effort of building Africa’s internet freedom community. It embodies the practical, peer-led approach to digital safety that empowers often-overlooked communities. His journey to Windhoek mirrors CIPESA’s core mission of promoting the inclusive and effective use of ICT for improved governance and livelihoods in Africa. Gole’s remarkable endurance underscores that protecting our digital spaces demands mobility, resilience, and solidarity. We applaud his effort as he carries this message all the way from Kampala to Windhoek.”
– Brian Byaruhanga, Technology Officer, CIPESA

In all instances, Gole’s efforts culminated in the Digital Security Hub that has become a staple at FIFAfrica and serves as a one-stop-shop for attendees online and offline to secure their devices while also attaining practical skills and information on how to navigate online spaces safely. 

The Digital Security Hub convened by CIPESA has featured experts from across the world and this year will include experts from Africa Interactive Media, Base Iota, Co-creation HUB, Defenders Protection Initiative (DPI), Digital Society Africa, Greenhost/Frontline Defenders and Defend Defenders alongside SocialTic, and Foundacion Accesso bringing learnings and expertise from South America.

About the Forum on Internet Freedom in Africa: Now in its 12th year, the annual Forum on Internet Freedom in Africa (#FIFAfrica25) is the continent’s leading platform for shaping digital rights, inclusion, and governance conversations. This year, the Forum will be held in Windhoek, Namibia, a beacon of press freedom, gender equity, and progressive jurisprudence, and is set to take place on September 24–26, 2025. 

FIFAfrica offers a unique, multi-stakeholder platform where key stakeholders, including policymakers, journalists, global platform operators, telecommunications companies, regulators, human rights defenders, academia, and law enforcement representatives convene to deliberate and craft rights-based responses for a resilient and inclusive digital society for Africans. 

FIFAfrica25 will be the third edition to be hosted in Southern Africa. Previous editions have been hosted in Uganda, South Africa, Ghana, Ethiopia, Zambia, Tanzania and Senegal. Namibia, with its strong democratic credentials and progressive stance on digital transformation, provides a fitting host for FIFAfrica25.

About the Digital Security Hub: At the heart of FIFAfrica has been a Digital Security Hub designed to equip participants with practical knowledge and tools for staying safe in an increasingly digital environment. The Hub offers practical demonstrations and expert guidance on how to strengthen digital safety and resilience practices.

The Hub serves as a meeting for digital security trainers, technologists, and frontline users from across Africa and this year, Latin America as well. Digital security practices shared by the teams include advice on encryption and secure communications, through to countering online harassment and building safer digital infrastructures. 

The Digital Security hub is a vital feature of FIFAfrica25 and continues to serve as a space where communities can tangibly build their capacity to navigate the  constantly evolving digital ecosystem.

About the Collaboration on International ICT Policy for East and Southern Africa (CIPESA): CIPESA works to promote inclusive and effective use of Information and Communication Technology. (ICT) in Africa for improved governance and livelihoods. CIPESA was established in 2004 in response to the findings of the Louder Voices Report for the UK’s then Department for International Development (DFID), which cited the lack of easy, affordable and timely access to information about ICT-related issues and processes as a key barrier to effective and inclusive ICT policy making in Africa. CIPESA’s work continues to respond to a shortage of information, resources and actors consistently working at the nexus of technology, human rights and society.

Initially set up with a focus on research in East and Southern African countries, CIPESA has since expanded its work to include advocacy, capacity development and movement building across the African continent.

Today CIPESA is a leading ICT policy and governance think tank in Africa. CIPESA has strongly exhibited its passion about raising the capacity of African stakeholders in effective ICT policy making and in engendering ICT in development and poverty reduction, as per its mandate. 

For Queries about CIPESA and the Digital Resilience Hub

[email protected]
[email protected]

Africa’s Digital Dilemma: Platform Regulation Vs Internet Freedom

By Brian Byaruhanga |

Imagine waking up to find Facebook and Instagram inaccessible on your phone – not due to a network disruption, but because the platforms pulled their services out of your country. This scenario now looms over Nigeria, as Meta, the parent company of Facebook and Instagram, may shut down its services in Nigeria over nearly USD 290 million in regulatory fines. The fines stem from allegations of anti-competitive practices, data privacy violations, and unregulated advertising content contrary to the national laws. Nigerian authorities insist the company must comply with national laws, especially those governing user data and competition. 

While this standoff centres on Nigeria, it signals a deeper struggle across Africa as governments assert digital sovereignty over global tech platforms. At the same time, millions of citizens rely on these platforms for communication, activism, access to health and education, economic livelihood, and self-expression. Striking a balance between regulation and rights in Africa’s evolving digital landscape has never been more urgent.

Meta versus Nigeria: Not Just One Country’s Battle

The tension between Meta and Nigeria is not new, nor is it unique. Similar dynamics have played out elsewhere on the continent:

  • Uganda (2021–Present): The Ugandan government blocked Facebook after the platform removed accounts linked to state actors during the 2021 elections. The block remains in place, effectively cutting off millions from a critical social media service unless they use Virtual Private Networks (VPNs) to circumvent the blockage.
  • Senegal (2023): TikTok was suspended amid political unrest, with authorities citing the app’s use for spreading misinformation and hate speech.
  • Ethiopia (2022): Facebook and Twitter were accused of amplifying hate speech during internal conflicts, prompting pressure for tighter oversight.
  • South Africa (2025): In a February 2025 report, the Competition Commission found that freedom of expression, plurality and diversity of media in South Africa had been severely infringed upon by platforms including Google and Facebook. 

The Double-Edged Sword of Regulation

Governments have legitimate reasons to demand transparency, data protection, and content moderation. Today, over two-thirds of African countries have legislation to protect personal data, and regulators are becoming more assertive. Nigeria’s Data Protection Commission (NDPC), created by a 2023 law, wasted little time in taking on a behemoth like Meta. Kenya also has an active Office of the Data Protection Commissioner, which has investigated and fined companies for data breaches. 

South Africa’s Information Regulator has been especially bold, issuing an enforcement notice to WhatsApp to comply with privacy standards after finding that the messaging service’s privacy policy in South Africa was different to that in the European Union. These actions send a clear message that privacy is a universal right, and Africans should not have weaker safeguards.

These regulatory institutions aim to ensure that citizens’ data is not exploited and that tech companies operate responsibly. Yet, in practice, digital regulation in Africa often walks a thin line between protecting rights and suppressing them.

While governments deserve scrutiny, platforms like Meta, TikTok, and X are not blameless. They often delay to respond to harmful content that fuels violence or division. Their algorithms can amplify hate, misinformation, and sensationalism, while opaque data harvesting practices continue to exploit users. For instance, Branch, a San Francisco-based microlending app operating in Kenya and Nigeria, collects extensive personal data such as handset details, SMS logs, GPS data, call records, and contact lists in exchange for small loans, sometimes for as little as USD 2. This exploitative business model capitalises on vulnerable socio-economic conditions, effectively forcing users to trade sensitive personal data for minimal financial relief.

Many African regulators are pushing back by demanding localisation of data, adherence to national laws, and greater responsiveness, but platform threats to exit rather than comply raise concerns of digital neo-colonialism where African countries are expected to accept second-tier treatment or risk exclusion.

Beyond privacy, African regulators are increasingly addressing monopolistic behaviour and unfair practices by Big Tech as part of a broader push for digital sovereignty. Nigeria’s USD 290 million fine against Meta is not just about data protection and privacy, but also fair competition, consumer rights, and the country’s authority to govern its digital space. Countries like Nigeria, South Africa and Kenya are asserting their right to regulate digital platforms within their borders, challenging the long-standing dominance of global tech firms. The actions taken against Meta highlight the growing complexity of balancing national interests with the transnational influence of tech giants. 

While Meta’s threat to exit may signal its discomfort with what it views as restrictive regulation, it also exposes the real struggle governments face in asserting control over digital infrastructure that often operates beyond state jurisdiction. Similarly, in other parts of Africa, there are inquiries and new policies targeting the market power of tech giants. For instance, South Africa’s competition authorities have looked at requiring Google and Facebook to compensate news publishers  (similar to the News Media and Digital Platforms Mandatory Bargaining Code in Australia). These moves reflect a broader global concern that a few platforms have too much control over markets and need checks to ensure fairness.

The Cost of Disruption: Economic and Social Impacts

When platforms go dark, the consequences are swift:

  • Businesses and entrepreneurs lose access to vital marketing and sales tools.
  • Creators and influencers face income loss and audience disconnection.
  • Activists and journalists find their voices limited, especially during politically charged periods.
  • Citizens are excluded from conversations and accessing information that could help them make critical decisions that affect their livelihoods.
  • Students and educators experience setbacks in remote learning, particularly in under-resourced communities that rely on social media or messaging apps to coordinate learning.
  • Access to public services is disrupted, from health services to government updates and emergency communications.

A 2023 GSMA report showed that more than 50% of small businesses in Sub-Saharan Africa use social media for customer engagement. In countries such as Nigeria, Uganda, Kenya or South Africa, Facebook and Instagram are lifelines. Losing access even temporarily sets back innovation, erodes trust, and impacts livelihoods.

A Call for Continental Solutions

Africa’s digital future must not hinge on the whims of a single government or a foreign tech giant. Both states and companies should be accountable for protecting rights in digital contexts, ensuring that development and digitisation do not trample on dignity and equity. This requires:

  • Harmonised continental policies on data protection, content regulation, and digital trade.
  • Regional norm-setting mechanisms (like the African Union) to enforce accountability for both governments and corporations.
  • Investments in African tech platforms to offer resilient alternatives.
  • Public education on digital rights to empower users against abuse from both state and corporate actors.
  • Pan-African contextualised business and human rights frameworks to ensure that digital governance aligns with both local realities and global human rights standards. This includes the operationalisation of the UN Guiding Principles on Business and Human Rights, following the examples of countries like Kenya, South Africa and Uganda, which have developed national action plans to embed human rights in corporate practice.

The stakes are high in the confrontation between Nigeria and Meta. If mismanaged, this tension could lead to fragmentation, exclusion, and setbacks for internet freedom, with ordinary users across the continent paying the price. To avoid this, the way forward must be grounded in the multistakeholder model of internet governance which aims for governments to regulate wisely and transparently, and for tech companies to respect local laws and communities, and for civil society to be actively engaged and vigilant. This will contribute to a future where the internet is open, secure, and inclusive and where innovation and justice thrive. 

Growing the Conversation on Online Rights and Internet Measurement in Africa

By Juliet Nanfuka |
Rising awareness of the role the internet can play in promoting democratic governance, economic prosperity, civic participation and social inclusion is increasingly driving discussions around Africa. A growing number of stakeholders is getting involved in discussions to address gaps in the realisation of the potential of the internet in progressing socio- economic development and justice.
Platforms such as the Internet Governance Forum gave birth to regional and national dialogues on the issues affecting internet governance and internet rights on the continent. Discussions on the technical management of the internet have been held by bodies like the Internet Corporation for Assigned Names and Numbers (ICANN) and the African Network Information Centre (AFRINIC).
Similarly, the Africa Internet Summit (AIS) currently taking place in Nairobi, Kenya has seen yet another convening of stakeholders to explore the current landscape of internet access and use in Africa. The annual multi-stakeholder conference allows key players in Africa’s internet industry to interact with the global Internet community.
This year’s summit is held at a time when Africa’s growing internet use is threatened by increasing affronts to the free flow of information online, including shut downs of the internet, social media and services such as mobile money. Up to 25% of Africa’s households have access to the internet, according to the International Telecommunications Union, and the average telephone penetration on the continent stands at 81%. But rising incidents of shutdowns, along with other curtails to free expression and privacy online, are getting more actors in Africa
The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) will be sharing research insights and experiences on the relationship between internet infrastructure, privacy, surveillance and censorship in Africa.
To-date, there remains little data in this area which is fundamental to support advocacy for improved policy development for online rights in Africa. Currently, the true extent of interference in communications remains largely unknown and subject to speculation where there is limited evidence of interference at an internet infrastructure level.
During the AIS, CIPESA Executive Director Dr. Wairagala Wakabi presented on Tampering with the Open Internet: Experiences From Africa during which he shared insights from the 2016 report on the State of Internet Freedom Africa which forms the latest in the #InternetFreedomAfrica series of reports that CIPESA have released since 2014. Additional insights were shared during a panel discussion on Internet measurements and Internet freedom alongside Centre for Intellectual Property and Information Technology Law (CIPIT) and Small Media (UK) during which the digital resilience of civil society was also  discussed.
The discussions built on presentations made by Research ICT Africa and AFRINIC during workshops they hosted at the Summit.

See this Storify: Measuring the Internet (or continue to Storify below)

Meanwhile, CIPESA and the Association for Progressive Communications (APC) will host the Forum on Internet Freedom in Africa (FIFAfrica) in Johannesburg, South Africa on September 27–29, 2017 where there will be continuation of similar discussions including the cross paths of internet use, access, policy and online rights in the continent.
Share your thoughts and opinions online using #InternetFreedomAfrica


The African Internet Summit (#AISKenya) taking place in Nairobi has raised various arguments for the measurement of internet infrastructure in Africa. The current internet landscape features various forms of online interruption, some of which go unnoticed due to the absence of measurement.
https://storify.com/cipesaug/measuring-the-internet