FIFAfrica26 is calling! How Will You Answer?

By FIFAfrica |

Accept the call and come ready to “Be The Experience”!

At the upcoming Forum on Internet Freedom in Africa 2026 (FIFAfrica26), be ready to do lots of the following:

  • Connect and meet people beyond your usual networks.
  • Question by bringing the difficult questions.
  • Learn by stepping into conversations beyond your usual area of work
  • Contribute through sharing your experience, ideas and perspective
  • Collaborate and find people you can build with
  • Experience and make the Forum your own!

As you enjoy the weekend, take a little time to think about what you are bringing to FIFAfrica26, what you hope to take away, and the conversations you want to be part of.

We look forward to engaging with you more next week as we get closer to the Forum.

Until then, get ready to Accept the Call and #BeTheExperience!

If you haven’t yet registered for FIFAfrica26, you can still do so here.

Uganda’s Digital Economy: Rights Trends, Regulatory Gaps and Policy Responses

By Doreen Elizabeth Namuyanja |

Uganda’s digital economy is expanding rapidly across finance, transport, agriculture, commerce, healthcare and public-service delivery. However, this growth is outpacing the legal, regulatory and institutional safeguards needed to address emerging concerns around personal and biometric data, artificial intelligence, platform work, digital exclusion and internet shutdowns.

Drawing on a 2025 survey, two commentaries and a policy submission by CIPESA, this policy brief examines Uganda’s evolving digital business landscape, business data practices, the future of work and the impact of internet disruptions. It highlights the gaps between technological advancement and effective governance and proposes actions for government, businesses, private sector associations and civil society to build an inclusive, resilient, and rights-respecting digital economy.

The brief finds that Uganda has established important legal protections, including the Data Protection and Privacy Act of 2019. The principal challenge, however, is implementation, enforcement, and the ability of regulatory and institutional frameworks to adapt to rapidly evolving technologies and business models. Businesses frequently collect personal and biometric data without sufficiently explaining how it will be used, stored, shared, or deleted. Meaningful consent, data security, and effective retention and deletion practices also remain inconsistent, particularly among businesses with limited compliance capacity.

These gaps have consequences beyond privacy and individual rights. Weak data governance can undermine trust in digital services, while inadequate safeguards for platform workers and persistent digital exclusion can limit who benefits from the digital economy. Internet shutdowns pose a broader threat, disrupting digital financial services, e-commerce, public services and other activities that increasingly depend on reliable connectivity.

The brief calls for coordinated action by government, businesses, private sector associations and civil society to:

Businesses

  • Strengthen data governance and informed consent: implement collection and processing frameworks built on explicit, freely given consent, backed by clear, accessible privacy notices.
  • Improve data security and lifecycle management: adopt encryption, regular security audits, and clear retention, deletion and minimisation policies.
  • Build organisational compliance capacity: appoint and train Data Protection Officers, embed privacy-by-design into product development, and run regular staff training on data protection, cybersecurity and phishing risks.
  • Strengthen digital resilience: develop business continuity plans for internet disruptions, and collaborate with civil society and legal actors to promote an open, secure and reliable internet.

Government of Uganda

  • Strengthen enforcement of the data protection framework by adequately resourcing the Personal Data Protection Office (PDPO) and other regulators to conduct audits, investigate violations, and impose proportionate sanctions.
  • Modernise the legal and policy framework to address biometric data, AI and platform work, aligned with constitutional and international human rights standards, and issue practical, sector-specific guidance to help businesses, particularly SMEs, comply.
  • Promote digital inclusion and public awareness through sustained education campaigns, including in local languages, and continued investment in affordable infrastructure and digital skills.
  • Safeguard the digital economy against internet disruptions by developing clear legal safeguards against shutdowns and ensuring any restrictions comply with constitutional and international human rights obligations.

Private Sector Associations

  • Build members’ capacity through regular training on data protection, cybersecurity, AI governance and business continuity planning.
  • Promote industry standards and peer learning by developing model policies and compliance toolkits for consistent implementation across member organisations.
  • Support risk management by encouraging periodic risk assessments among members and facilitating the sharing of lessons learned and mitigation strategies.

Civil Society Organisations

  • Strengthen multi-stakeholder collaboration among government, businesses, academia and technical experts on data protection, AI governance and digital rights.
  • Promote public awareness and digital rights literacy through accessible educational materials and community outreach.
  • Undertake research and evidence-based advocacy on biometric data governance, AI, platform work and internet shutdowns, including documenting their social, economic and human rights impacts, to support stronger legal frameworks and strategic litigation.
  • Support business compliance and resilience by developing practical guidance, templates and capacity-building support on responsible data governance.

Read the full brief here.

FIFAfrica26 Is One Month Away – It’s Time to Connect!

FIFAfrica26 | 

In just one month, the Forum on Internet Freedom in Africa 2026 (FIFAfrica26) will convene in Mauritius from September 28 to October 1, 2026, bringing together hundreds of participants from across Africa and beyond for critical conversations on digital rights, inclusion, governance, and the future of the continent’s digital landscape. Now is the time to begin engaging with the vibrant community that makes FIFAfrica such a powerful space for exchange and collaboration. 

Participants (in-person and remote) can already look forward to a rich agenda shaped by the digital rights community which reflects the pressing issues at the heart of Africa’s digital rights landscape. The Forum will spotlight themes including digital democracy and civic participation, data governance and sovereignty, artificial intelligence and emerging technologies, platform accountability, digital inclusion, digital economy and trade, movement building, and digital security and safety.

And the conversation does not have to wait until you arrive in Mauritius! You can start connecting and engaging with fellow participants and the wider community now by following @cipesaug and sharing your anticipation, insights, and reflections ahead of the Forum. Use #FIFAfrica26 and #InternetFreedomAfrica to join and amplify the conversations shaping a more open, inclusive, and secure digital future for the continent. Be sure to also join the engaging networks and communities within the event app too. You can start your own too!

As you prepare to attend or participate remotely, we encourage you to take a moment to read the FIFAfrica26 Code of Conduct. The Forum is built on dignity, respect, inclusion, and constructive engagement. The Code of Conduct applies to all Forum spaces including sessions, social events, and online platforms and is intended to ensure that every participant can engage free from intimidation, discrimination, harassment, or hostility. All attendees are expected to uphold these standards throughout the event. 

For those traveling, be sure to review the official Travel Note and plan accordingly. FIFAfrica26 will be hosted at the InterContinental Resort, Mauritius in Balaclava. 

We look forward to welcoming you online or in person at FIFAfrica26.

CIPESA and UNESCO Partner on Project to Strengthen Climate Change Information Integrity in Africa

By Juliet Nanfuka |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA), in partnership with UNESCO, is launching a new project to address the growing challenge of climate change disinformation and strengthen information integrity in the public sphere.

At a time when false and misleading narratives are weakening public trust and distorting public understanding of the climate crisis, the initiative will support fact-based public discourse and strengthen the ability of journalists and civil society actors to engage with climate issues using credible information.

Reliable climate information is essential to informed public debate and effective climate action. Yet journalists, content creators, and Civil Society Organisations (CSOs) working on climate and environmental issues often lack the resources and skills needed to verify information, identify disinformation and effectively communicate accurate findings to the public.

CIPESA’s research has documented some of these challenges. Journalists and activists working on climate-related issues, including environment, land and extractives, face significant information gaps and have to navigate disinformation and misinformation campaigns, often with limited avenues to independently verify information.

The initiative recognises that public communication relies on facts and the ability of credible voices to deliver information. The project is supported by the UNESCO-led Global Initiative for Information Integrity on Climate  Change, which was established to investigate, expose, and dismantle disinformation related to climate change.

The project will respond to these challenges by combining research, capacity building, and public communication. Research will map how climate disinformation spreads across African digital ecosystems, who drives it, and what tactics they use. Findings will inform a Fact-checking Masterclass at the upcoming 2026 Forum on Internet Freedom in Africa, an online training for journalists and civil society actors, and a communications campaign aimed at strengthening public awareness of climate disinformation and promoting credible sources of information.

This approach builds on the Declaration on Information Integrity on Climate Change, which commits its signatories to protect information integrity on climate change at international, national, and local levels. It also reflects the broader United Nations Global Principles for Information Integrity, which envision “an information ecosystem that delivers choice, freedom, privacy and safety for all,” and support those working to share facts in the public interest.

Reporting on climate change in Africa is increasingly taking place in a difficult information environment. Journalists, activists and human rights defenders covering environmental, land and extractives issues face surveillance, censorship, online harassment and coordinated disinformation campaigns. CIPESA’s research has documented these risks, as well as the limited digital security resources available to many of those doing this work.

The project will focus on Uganda and Ethiopia, both of which are experiencing a rise in misleading narratives related to climate change in their digital ecosystems. These narratives frequently revolve around issues such as deforestation, dam and water system developments, droughts, landslides, oil and gas exploration.

The project’s research will also track the information environment, including the public positions and communications of African governments ahead of the 31st Session of the Conference of Parties (COP31) scheduled for November 2026 in Ankara, Türkiye. The conference brings together nearly 200 nations under the United Nations Framework Convention on Climate Change (UNFCCC) to negotiate climate action, set emission-reduction targets, and coordinate policies to limit global warming.

Looking further ahead, Ethiopia’s hosting of the 32nd session of the (COP32) in 2027, will bring the global climate conversation back to Africa for the fifth time after Kenya (2006), South Africa (2011), Morocco (2016), and Egypt (2022). This makes the CIPESA-UNESCO partnership particularly timely.  As technology increasingly shapes how people access, interpret and contest information about the environment, there is a growing need to understand the evolving relationship between digital platforms, climate narratives, and the integrity of public debate.

CIPESA Urges Kenya to Align and Strengthen Its Draft AI Policy

By Raylenne Kambua |

In August 2026, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) submitted a detailed set of recommendations to the Committee on the Draft Kenya Artificial Intelligence (AI) and Other Emerging Technologies Policy, 2026. The submission calls for closer alignment of Kenya’s policy with regional and international AI frameworks, alongside stronger protections for fundamental human rights.

The submission emphasises the need for Kenya to strike a balance between its aspirations for AI governance and strong safeguards that protect human rights, people, and democratic values. Without these, the nation risks developing systems that are innovative but exclusive, unfair, and harmful.

CIPESA argues that since Kenya is simultaneously advancing multiple AI-related processes, including a national AI strategy, a proposed AI Bill, and this draft AI policy, there is a need to align and harmonise the different proposed frameworks to ensure coherence and mitigate the risks of duplication and contradictory provisions.

For example, under section 3.5.1, the Policy commits the government to develop a dedicated AI and other Emerging Technologies Governance Act to provide the legal framework for its governance in Kenya, including the establishment, powers, and functions of the Council, without acknowledging that a similar Bill is already before the Senate.

Kenya’s policy direction is influenced by constitutional obligations as well as wider regional and international commitments that underscore the importance of human rights, accountability, transparency, and inclusiveness. According to CIPESA’s submission, Kenya should incorporate these principles into legally binding policy measures rather than just mentioning them.

The submission further encourages collaboration within the East African region and across the African continent, pointing to the value of shared standards, combined knowledge, and coordinated advocacy in strengthening governance outcomes.

CIPESA’s Navigating the Implications of AI in Kenya report also highlights that AI is reshaping digital participation, information access, and democracy in Kenya. In the absence of explicit protections and clear safeguards, AI systems can perpetuate discrimination, facilitate surveillance, violate people’s right to privacy, restrict freedom of expression, and undermine livelihoods. A rights-based approach that includes mandatory human rights impact assessments will ensure that potential harms are identified and mitigated before systems are deployed.

While the draft policy outlines institutional structures and governance ambitions, CIPESA argues that effective oversight will depend on institutional independence, clear powers, and meaningful accountability. The submission raises concerns about the proposed AI Council’s institutional independence and recommends giving it explicit authority to audit, obtain information, enforce compliance, and report directly to Parliament.

In automated systems, decision-making processes are often opaque and distributed across multiple actors. CIPESA therefore recommends clearly defining responsibilities and liability so that individuals harmed by AI systems have effective redress mechanisms.

Effective AI governance requires technical expertise, resources, and coordination across multiple agencies, yet many institutions in Kenya remain under-resourced. Therefore, proposed governance frameworks should be realistic about the state’s ability to implement and enforce stronger oversight mechanisms by investing in institutional capacity and talent retention.

According to CIPESA’s research, AI content moderation on major platforms is built largely for the Global North, with low-resource African languages. Many AI systems deployed in African contexts are trained on datasets that do not reflect local realities, leading to biased outcomes with direct implications for fairness, inclusion, and accuracy. This necessitates strong local data ecosystems and locally relevant content moderation systems and languages.

Kenya’s 2025 High Court ruling on the Worldcoin iris-scanning project affirmed the need for stronger data protection measures and integration with AI-specific legislation. According to CIPESA, incorporating pre-deployment oversight would transform AI governance from a reactive to a proactive model, particularly regarding sensitive biometric data.

AI systems are resource-intensive, consuming a lot of energy and requiring large amounts of water for data centre cooling. They also emit carbon and ultimately contribute to electronic waste. The submission recommends environmentally sustainable approaches, including independent third-party verification of environmental disclosures and publication of verified information in the public Registry.

The African Union AI Strategy identifies disinformation as a distinct risk. AI can influence public discourse by deciding which information is promoted, suppressed, or amplified. Disinformation, manipulation, targeted harassment, technology-facilitated gender-based violence (TFGBV), and AI-generated deepfakes can create particular risks in civic and democratic spaces, with disproportionate effects on women and other vulnerable groups. CIPESA proposes explicit recognition of these threats, implementation of gender impact assessments for high-risk systems, and stronger oversight of AI use in elections, political advertising, and content moderation.

Another recommendation is the inclusion of civil society representation at the steering committee, which is the top decision-making level. This is to ensure meaningful participation and alignment with the African Union AI Strategy and the UNESCO Recommendation on the Ethics of AI, which call for inclusive, multi-stakeholder involvement in AI governance, especially where major decisions are made.

Inclusion and public participation also require accessible language and processes that enable broader public engagement with what are often complex and technical issues, through investments in digital literacy and public awareness.

The submission further underscores the importance of labour rights and the often invisible workforce behind AI systems, many of whom work in unfavourable conditions. By highlighting the need for fair labour standards, protections, and recognition of data work, CIPESA also recommends including the workforce that sustains AI ecosystems in high-level policy discussions.

Explainability and transparency are essential to accountable AI governance. For people to trust AI systems, they need to understand how AI-driven decisions are made and contest results they believe to be unfair.  To prevent AI systems from being treated as black boxes beyond public scrutiny, there must be clear documentation, disclosure standards, and rights to explanation. This builds accountability and trust, especially in high-risk sectors like public services, healthcare, and finance.

Finally, CIPESA highlights the necessity of continuous policy review and adaptation, emphasising that governance frameworks must remain adaptable and responsive as AI technologies evolve quickly. This includes establishing mechanisms for periodic review, stakeholder feedback, and iterative policy development to ensure that regulations remain relevant and effective over time.

CIPESA’s recommendations provide a mechanism to close the gap between ambition and accountability as Kenya works to finalise its AI policy. The decisions made at this point will influence not only the development, deployment, and application of AI but also the distribution of its benefits and risks.

Key recommendations from CIPESA:

  1. Align Kenya’s AI policy and legislation to avoid duplication and conflicting provisions.
  2. Make human rights and gender impact assessments mandatory for high-risk AI systems.
  3. Strengthen the independence and powers of AI oversight institutions, including audit, enforcement, and redress.
  4. Protect workers across the AI value chain, including data annotators and content moderators.
  5. Require environmental accountability for AI, including disclosure and independent verification of energy, water, emissions, and e-waste impacts.
  6. Ensure transparency and meaningful participation, including stronger safeguards for AI-generated political content and a formal role for civil society in AI governance.

Read the full submission here: CIPESA Submission on Kenya’s Draft AI and Emerging Technologies Policy.