CIPESA and PALU Challenge Rwanda to Address Digital Rights Gaps in UPR Review

By Edrine Wanyama |

Rwanda’s digital rights record has been assessed by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and the Pan African Lawyers Union (PALU) in a joint submission to the United Nations Human Rights Council. The review contributes to the efforts of the Universal Periodic Review (UPR) mechanism to strengthen human and digital rights within the country. Notably, the review underscores the urgent need for reforms to safeguard freedom of expression, privacy, and digital inclusion in the face of evolving technologies and governance challenges.

The report highlights positive progress such as the enactment of the Data Protection and Privacy Law (Law No. 058/2021) which protects individuals’ data and establishes the Rwanda National Cyber Security Authority (NCSA) to oversee personal data management. The report also notes the establishment of the Irembo platform, which serves as a basis for enhancing access to public services.

Through the National Strategy for Transformation (NST2) for the period 2024 to 2029, the Rwanda government aims to attain 100% e-service access for Rwandans by 2030, including through enhancing digital skills and literacy under the Digital Ambassadors Programme. There have also been concerted efforts aimed to ensure the financial inclusion of women.

Nevertheless, fundamental freedoms, including free expression, access to information, assembly and association, remain severely restricted in the country. The report observes elevated and systematic threats and intimidation, harassment, arrests and detention and prosecution of government opponents and critics, human rights defenders (HRDs), journalists, and other online activists. This has had a chilling effect on the exercise of freedoms. Access to several websites has been blocked on government orders, while victims of government wrath are often slapped with lengthy prison sentences, which also serves as a tool to silence those who do not agree with the government.

Digital inclusion is also still a major challenge, especially for women, persons with disabilities and the rural populace. According to the report, digital inclusion continues to have adverse effects on the exercise of online rights and freedoms, although the country has a high broadband coverage (99%). Smart phone penetration remains low at 22% and the majority of citizens do not use the internet. The high taxes and high internet costs have further aggravated the inclusion gap.

In terms of its data protection landscape, the report acknowledges the positive step of enacting the Data Protection Act, but notes that the law is weak, lacks strong safeguards such as judicial oversight, and contains a substantively less effective redress mechanism.

Moreover, the report underscores that there is enhanced surveillance of individuals and their communications using sophisticated spyware and malware, such as NSO Group’s Pegasus spyware, and the extensive Closed Circuit Television (CCTV) networks. The surveillance has been deployed to target, threaten and intimidate journalists and other critics.

The report makes several recommendations to the committee to consider if the human rights record of Rwanda in online spaces is to be improved. These recommendations call on the government of Rwanda to:

  • Decriminalise defamation and review vague laws used to suppress freedom of expression and peaceful dissent.
  • Establish independent oversight over surveillance practices and introduce judicial safeguards to protect privacy.
  • Strengthen the implementation of the Access to Information law and ensure that public bodies proactively disclose information.
  • Enhance the capacity of the Rwanda National Cyber Security Authority to enforce data protection while ensuring its independence from executive interference.
  • Promote inclusive digital access, especially for women, persons with disabilities, and rural communities.
  • Cease censorship and arbitrary removal of online content, and establish transparent mechanisms for content moderation.
  • Establish a favourable and safe environment for operations of human rights defenders, journalists and other online activists as opposed to persecuting them by repealing or amending laws to provide for rights-respecting provisions.
  • Prohibit and penalise tech-facilitated gender-based violence especially against women and ensure their access to timely and effective redress.
  • Investigate all cases of enforced disappearance, ensuring punishment for any perpetrators and justice for survivors and their family members.
  • Make strong and repeated public statements at the highest government levels to make clear that all law enforcement authorities and investigation agencies should comply with the law, and that all detained people must be brought to court within 24 hours.
  • Embrace universal design and ensure its full integration into the IremboGov platform to cater for and ensure that persons with disabilities especially visual impairments have full access to all of its services.

  See full Report here.

Claiming Digital Rights in Uganda’s Business Sector

By CIPESA Writer |

In an era where digital technologies are reshaping every sector including health, agriculture, finance, education and the labour market, Uganda is fast-tracking its ambition to become a fully connected, inclusive digital society. Yet, as the country rolls out its Digital Transformation Roadmap, critical questions remain: Who is being left behind? Who bears the cost of connecting the unconnected? How do we ensure that technological innovation does not come at the expense of human rights protection?

These were the central concerns at the inaugural National Business and Digital Rights Policy Dialogue hosted by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) on July 23, 2025. The event brought together 55 participants comprising policymakers, innovators, civil society, the private sector, and development partners to explore how Uganda’s digital transformation is affecting human rights, especially data protection, privacy, access, and equity. The dialogue reviewed not just Uganda’s      progress, but the power dynamics, policy gaps, and human rights risks shaping digitalisation in business.

The Digital Vision vs. The Digital Reality

Uganda’s Digital Transformation Roadmap sets bold targets: 90% household connectivity, nationwide broadband coverage, and widespread e-service access by 2040. Progress is visible, with over 4,000km of national optical fibre infrastructure laid, and more than 100 digital public services rolled out. Yet, beneath these achievements, gaps in digital literacy, access and utility, as well as funding constraints, persist.

According to the 2024 National Population and Housing Census, Uganda’s population stands at 45.9 million, of whom 50.5% are under the age of 18, representing a massive youth cohort born into a digital world yet often lacking affordable internet access and digital tools. Connectivity gaps are further shaped by geography, with over 75% of the population living in rural areas where infrastructure is limited.

On the gender lens, women who comprise 23.4 million of the population, slightly outnumbering men at 22.5 million, continue to disproportionately face digital access barriers. These range from high data costs, low digital literacy, and limited access to devices and digital infrastructure, especially in rural and remote districts. As one of the panelists during the policy dialogue noted, “Digital transformation is moving fast, but our institutions and communities are not always keeping pace.”

Meanwhile, the informal sector, which employs approximately 80-92% of the country’s workforce, remains largely invisible in national digital strategies and compliance frameworks. This informal sector significantly overlaps with Micro, Small, and Medium Enterprises (MSMEs), which are central to Uganda’s economic growth, yet they often operate without proper tools to secure user data or navigate the evolving digital compliance landscape due to limited awareness, resources, and technical capacity.

As businesses digitise, their responsibility to protect users’ rights increases. However, many of them lack the knowledge to protect these rights. Uganda’s laws and enforcement mechanisms also have gaps. As a result, there is weak oversight over fintech platforms and digital lenders, low awareness and implementation of the Data Protection and Privacy Act, rampant digital surveillance, and gendered digital harms, including online harassment.

Data Is Power but Who Holds It?

Uganda’s fast-growing population is generating an unprecedented amount of personal data. The 2024 population census itself relied on tablet-based digital enumeration for the first time. However, while digital data collection is expanding, data governance is not keeping pace. The Personal Data Protection Office (PDPO) and National Information Technology Authority Uganda (NITA-U) are key players, but capacity and resourcing gaps persist. If left unaddressed, digital innovation risks entrenching inequality, with vulnerable populations, especially refugees, informal workers, and low-income women, paying the price for systems that were not designed with their rights in mind.      

Digital Rights are Human Rights

The future of work in the advent of technology emerged as a key aspect of digital rights, with Moses Okello of the National Organisation of Trade Unions (NOTU) warning that Uganda’s labour laws have not kept pace with the rise of gig work and digital employment. Millions of informal workers remain unprotected and unaware of their rights in the digital economy. He called for urgent legal reforms and a national strategy that integrates labour protections into digital policy, while urging stronger collaboration with civil society to build grassroots awareness and empower workers to navigate digital transitions.

Ruth Ssekindi, Director at the Uganda Human Rights Commission (UHRC), underscored the commission’s constitutional duty to uphold human rights across both state and private sectors, particularly in Uganda’s fast-evolving digital landscape. She highlighted growing concerns over digital rights violations including uninformed data consent, artificial intelligence (AI) manipulation, child exploitation, and poor data security, noting that these challenges disproportionately affect vulnerable populations amid low digital literacy and weak enforcement.

Ssekindi called on businesses to embrace a broader duty of care that goes beyond tax compliance and profit, stressing the need to respect, protect, and remedy digital rights violations. She also pointed to the persistent gender gap in digital access and urged greater inclusion of women and marginalised communities in digital development. While the UHRC plays a key role in shaping digital governance through legal review, education, and policy oversight, she noted that the commission must be adequately resourced, empowered and supported to effectively fulfil its mandate in the digital age.

The dialogue reinforced a clear message that connectivity alone is not enough. Uganda must build an inclusive digital economy anchored in justice, transparency, and community voice. This means empowering watchdog institutions like the PDPO, updating outdated laws and regulations, investing in digital literacy, especially for youths and women, and supporting civic participation in digital policy-making.

In direct response, CIPESA launched the #BeeraSharp (translated as “Be Smart”) campaign. This initiative aims to equip Ugandan businesses with the knowledge and tools to act responsibly in the digital space. #BeeraSharp champions a culture of accountability, urging businesses to take charge of how they collect, store, share, and protect user data. It also promotes understanding of legal obligations under Uganda’s Data Protection and Privacy Act, while encouraging ethical digital conduct across sectors.

A Digital Future for All?

As Uganda ramps up its digitalisation agenda and embraces emerging technologies such as AI and robotics, businesses, policymakers, and civil society must work hand in hand to ensure Uganda’s digital revolution is not just a story of innovation but also a story of inclusion and respect for human rights. As the dialogue closed, one key takeaway stood out: Uganda’s digital future must be intentionally inclusive and rights-driven. Achieving this will require cross-sector collaboration to scale digital skills, reform of outdated laws, more financial and capacity support to institutions like UHRC, NITA-U and the PDPO to protect data rights, and empowering communities through digital literacy, local innovation, and inclusive governance.

CIPESA Welcomes Namibia Ministry of ICT and the Namibia IGF as Co-Hosts of FIFAFrica25

By FIFAfrica |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is pleased to announce that the 2025 edition of the Forum on Internet Freedom in Africa (FIFAfrica25) will be co-hosted in partnership with the Namibian Ministry of Information and Communication Technology (MICT) and the Namibia Internet Governance Forum (NamIGF).

Set to take place in Windhoek, Namibia, from September 25–27, 2025, this year’s Forum will serve as yet another notch in FIFAfrica’s 12-year history of assembling digital rights defenders, policymakers, technologists, academics, regulators, journalists, and the donor community, who all have the shared vision of advancing internet freedom in Africa.

With its strong commitments to democratic governance, press freedom, and inclusive digital development, Namibia offers fertile ground for rich dialogues on the future of internet freedom in Africa. The country holds a powerful legacy in the global media and information landscape, being the birthplace of the 1991 Windhoek Declaration on promoting independent and pluralistic media. In a digital age where new challenges are emerging – from information integrity and Artificial Intelligence (AI) governance to connectivity gaps and platform accountability – hosting FIFAfrica in Namibia marks a key moment for the movement toward trusted information as a public good, including in the digital age.

“Through the Ministry of Information and Communication Technology, Namibia is proud to co-host FIFAfrica25 as a demonstration of our commitment to advancing technology for inclusive social and economic development. This Forum comes at a critical moment for Africa’s digital future, and we welcome the opportunity to engage with diverse voices from across the continent and beyond in shaping a rights-respecting, secure, and innovative digital landscape,” Minister of Information and Communication Technology (ICT), Emma Inamutila Theofelus

This sentiment is shared by the NamIGF Chairperson, Albertine Shipena. “We are honoured to co-host the FIFAfrica25 here in Namibia. This partnership with MICT and CIPESA marks a significant step in advancing digital rights, open governance, and meaningful multistakeholder engagement across the continent. As the NamIGF, we are proud to contribute to shaping a more inclusive and secure internet ecosystem, while spotlighting Namibia’s growing role in regional and global digital conversations.”

The NamIGF was established in September 2017, through a Cabinet decision, as a multistakeholder platform that facilitates public policy discussion on issues pertaining to the internet in Namibia.

Dr. Wairagala Wakabi, the CIPESA Executive Director, noted that FIFAfrica25 presents a timely opportunity to advance progressive digital policy agendas that uphold fundamental rights and promote digital democracy in Africa. “As global debates on internet governance, data sovereignty, and platform accountability intensify, it is essential that Africans inform and shape the frameworks that govern our digital spaces. We are honoured to partner with the Namibian government and NamIGF to convene this critical conversation on the continent,” he said.

Since its inception in 2014, FIFAfrica has grown to become the continent’s leading assembly of actors instrumental in shaping conversations and actions at the intersection of technology with democracy, society and the economy. It has become the stage for concerted efforts to advance digital rights and digital inclusion. These issues, and new emerging themes such as mental health, climate and the environment, and the content economy, will take centre stage at FIFAfrica25, which will feature a mix of plenaries, workshops, exhibitions, and a series of pre-events.

Meanwhile, FIFAfrica will also recognise the International Day for Universal Access to Information (IDUAI), celebrated annually on September 28. The commemoration serves to underscore the fundamental role of access to information in empowering individuals, supporting informed decision-making, fostering innovation, and advancing inclusive and sustainable development – tenets which resonate with the Forum. This year’s celebration is themed, “Ensuring Access to Environmental Information in the Digital Age”.

At the heart of the Forum is a Community of Allies that have, over the years, stood alongside CIPESA in its pursuit of effective and inclusive digital governance in Africa.

Feedback on Session Proposals and Travel Support Applications

All successful session proposals and travel support applicants have been contacted directly. See the list of successful sessions here. Thank you for your patience and for contributing to what promises to be an exciting FIFAfrica25.  

Prepare for FIFAfrica25: Travel and Logistics

Everything you need to plan your attendance at the Forum can be found here – visit this page for key logistical details and tips to help you make the most of your experience!

Elevating Children’s Voices and Rights in AI Design and Online Spaces in Africa

By Patricia Ainembabazi

As Artificial Intelligence (AI) reshapes digital ecosystems across the globe, one group remains consistently overlooked in discussions around AI design and governance: Children. This gap was keenly highlighted at the Internet Governance Forum (IGF) held in June 2025 in Oslo, Norway, where experts, policymakers, and child-focused organisations called for more inclusive AI systems that protect and empower young users.

Children today are not just passive users of digital technologies; they are among the most active and most vulnerable user groups. In Africa, internet use among youths aged 15 to 24 was partly fuelled by the Covid-19 pandemic, hence their growing reliance on digital platforms for learning, play, and social interaction. New research by the Digital Rights Alliance Africa (DRAA), a consortium hosted by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), shows that this rapid connectivity has amplified exposure to risks such as harmful content, data misuse, and algorithmic manipulation that are especially pronounced for children.

The research notes that AI systems have become deeply embedded in the platforms that children engage with daily, including educational software, entertainment platforms, health tools, and social media. Nonetheless, Africa’s emerging AI strategies remain overwhelmingly adult-centric, often ignoring the distinct risks these technologies pose to minors. At the 2025 IGF, the urgency of integrating children’s voices into AI policy frameworks was made clear through a session supported by the LEGO Group, the Walt Disney Company, the Alan Turing Institute, and the Family Online Safety Institute. Their message was simple but powerful: “If AI is to support children’s creativity, learning, and safety, then children must be included in the conversation from the very beginning”.

The forum drew insights from recent global engagements such as the Children’s AI Summit of February 2025 held in the UK and the Paris AI Action Summit 2025. These events demonstrated that while children are excited about AI’s potential to enhance learning and play, they are equally concerned about losing creative autonomy, being manipulated online, and having their privacy compromised. A key outcome of these discussions was the need to develop AI systems that children can trust; systems that are safe by design, transparent, and governed with accountability.

This global momentum offers important lessons for Africa as countries across the continent begin to draft national AI strategies. While many such strategies aim to spur innovation and digital transformation, they often lack specific protections for children. According to DRAA’s 2025 study on child privacy in online spaces, only a handful of African countries have enacted child-specific privacy laws in the digital realm. Although instruments like the African Charter on the Rights and Welfare of the Child recognise the right to privacy, regional frameworks such as the Malabo Convention, and even national data protection laws, rarely offer enforceable safeguards against AI systems that profile or influence children.

Failure to address these gaps will leave African children vulnerable to a host of AI-driven harms ranging from exploitative data collection and algorithmic profiling to exposure to biased or inappropriate content. These harms can deprive children of autonomy and increase their risk of online abuse, particularly when AI-powered systems are deployed in schools, healthcare, or entertainment without adequate oversight.

To counter these risks and ensure AI becomes a tool of empowerment rather than exploitation, African governments, policymakers, and developers must adopt child-centric approaches to AI governance. This could start with mainstreaming children’s rights such as privacy, protection, education, and participation, into AI policies. International instruments like the UN Convention on the Rights of the Child and General Comment No. 25 provide a solid foundation upon which African governments can build desirable policies.

Furthermore, African countries should draw inspiration from emerging practices such as the “Age-Appropriate AI” frameworks discussed at IGF 2025. These practices propose clear standards for limiting AI profiling, nudging, and data collection among minors. Given that only 36 out 55 African countries currently have data protection laws, with few of them containing child-specific provisions, policymakers must take efforts to strengthen these frameworks. Such reforms should require AI tools targeting children to adhere to strict data minimisation, transparency, and parental consent requirements.

Importantly, digital literacy initiatives must evolve beyond basic internet safety to include AI awareness. Equipping children and caregivers with the knowledge to critically engage with AI systems will help them navigate and question the technology they encounter. At the same time, platforms similar to the Children’s AI Summit 2025 should be replicated at national and regional levels to ensure that African children’s lived experiences, hopes, and concerns shape the design and deployment of AI technologies.

Transparency and accountability must remain central to this vision. AI tools that affect children, whether through recommendation systems, automated decision-making, or learning algorithms, should be independently audited and publicly scrutinised. Upholding the values of openness, fairness, and inclusivity within AI systems is essential not only for protecting children’s rights but for cultivating a healthy, rights-respecting digital environment.

As the African continent’s digital infrastructure expands and AI becomes more pervasive, the choices made today will define the digital futures of generations to come. The IGF 2025 stressed that children must be central to these choices, not as an afterthought, but as active contributors to a safer and more equitable AI ecosystem. By elevating children’s voices in AI design and governance, African countries can lay the groundwork for an inclusive digital future that truly serves the best interests of all.

Registration For FIFAfrica25 Now Open!

By FIFAfrica |

We are excited to announce that registration for the 2025 Forum on Internet Freedom in Africa (FIFAfrica25) is officially OPEN!

Taking place in Windhoek, Namibia, FIFAfrica25 comes at a pivotal time for Africa’s digital future. As governments, civil society, technologists, and the broader digital society and ecosystem grapple with the evolving dynamics of Artificial Intelligence, platform regulation, surveillance, and internet shutdowns as well as funding for digital rights and governance efforts, this year’s Forum offers a much-needed space for bold conversations, collaborative thinking, and collective action.

Building on the momentum from CIPESA’s and partners’ recent engagements at the regional and global Internet Governance Forums (IGF), contributions to the World Summit on the Information Society (WSIS) +20 Summit, and preparations for the upcoming G20 Summit, the Forum will serve as a key bridge between global digital policy conversations with lived realities, governance priorities, and contexts within the African continent. As digital technologies shape Africa’s political, economic, and social landscape, safeguarding digital rights is essential to building inclusive, participatory, and democratic societies. 

Key themes at FIFAfrica25 will include:

  • AI, Digital Governance, and Human Rights
  • Disinformation and Platform Accountability
  • Internet Shutdowns
  • Digital Inclusion
  • Digital Trade in Africa
  • Digital Public Infrastructure (DPI)
  • Digital Safety and Resilience

Since 2014, FIFAfrica has created a leading pan-African space for shaping digital rights, inclusion, and governance conversations. Whether you’re a returning member of the FIFAfrica family or joining us for the first time, we invite you to register now and be part of shaping the digital rights agenda on the continent. 

Feedback on Session Proposals and Travel Support Applications

We received an incredible response for the call for session proposals and travel support. While we had anticipated providing feedback on July 4, 2025, we will now be able to provide feedback by July 14, 2025. Thank you for your patience and for contributing to what promises to be an exciting FIFAfrica25.   

Prepare for FIFAfrica25: Travel and Logistics

Everything you need to plan your attendance at the Forum is right here – visit this page for key logistical details and tips to help you make the most of your experience!