CIPESA Welcomes the Annulment of Sections of Uganda’s Computer Misuse Act

By Edrine Wanyama |

Uganda’s Constitutional Court has delivered a major ruling that has outlawed several sections of the Computer Misuse Act, Cap 96, and ordered the government and its agencies to stop any further enforcement of the nullified provisions. These stringent provisions had significantly restricted the use of various communication platforms, including social media. The court ruling marks an important step towards ending enduring limitations on freedom of expression, access to information and other online freedoms.

The Computer Misuse (Amendment) Act, 2022, which introduced a range of offences including unauthorised access, unauthorised sharing of information about children, hate speech, sharing of unsolicited and malicious information, and misuse of social media, has been outlawed in its entirety. These provisions were overly broad, vaguely worded and carried severe penalties.

In response to a number of petitions filed by individuals and civil society organisations, which were consolidated for determination, the Constitutional Court found that the Computer Misuse (Amendment) Bill, 2022, was passed into law without complying with the provisions of rule 24(3) of the Rules of Procedure of Parliament, which contravened articles 88 and 89 of the Constitution. Parliament’s rules of procedure and the Constitution require that the quorum should be ascertained before passing of laws.

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA), which was a co-petitioner in the case, had in its analysis and comments to the Parliamentary Committee on Information and Communications Technology argued that while addressing cybercrime was necessary, overly broad laws risk shrinking the digital civic space by limiting freedom of expression and access to information.

Moreover, the law was passed long after the Supreme Court ruling in Charles Onyango Obbo and Another v Attorney General, which had outlawed the criminalisation of false news in section 50 of the Penal Code Act. CIPESA had raised concerns about this inconsistency in the law prior to the filing of the petition.

Importantly, the Constitutional Court also struck down sections 162 and 163 of the Penal Code Act, which criminalised defamation. The Court found that these provisions violate article 9 of the African Charter on Human and Peoples’ Rights and are a limitation to the right to freedom of expression, contrary to regional and international human rights standards.

In the lead judgement of Justice Irene Mulyagonja, Court found that:

  • “Parliament passed the Computer Misuse (Amendment) Bill, 2022 into an Act of Parliament without complying with the provisions of rule 24(3) of the Rules of Procedure of Parliament made under Article 94 of the Constitution.
  • The enactment of the Computer Misuse (Amendment) Bill into an Act of Parliament without complying with rule 24(3) of the Rules of Procedure of Parliament was inconsistent with Articles 88 and 89 of the Constitution, and as a result, the Computer Misuse (Amendment) Act, 2022, was null and void.
  • The provisions of the Computer Misuse Act (2023 Edition) that were challenged in Constitutional Petitions 34, 37 and 42 of 2022 are therefore all null and void because they were enacted without following the law.
  • Section 162 of the Penal Code Act contravenes Article 9 of the African Charter on Human and Peoples’ Rights; and section 163 that defines the term “defamation” therein does not meet the standard of the law that is required by Article 9(2) of the Charter, and is inconsistent therewith to that extent and therefore null and void.”

Uganda has in recent years experienced significant restrictions on digital civic space. During the general elections in January 2026, the government shut down the internet for five days. In 2024, in the lead up to elections, were charged under the annulled law with malicious information on X and insulting the President and the First Family. These actions are often justified on grounds such as preventing online misinformation and disinformation or safeguarding national security, but their broad application raises serious concerns for digital rights and the right to free expression.

Over the years,  several civic actors, including journalists and media professionals, human rights defenders, political opponents, have faced intimidation, arrests, and prosecution under these contentious provisions of the Computer Misuse Law.

Despite the Constitutional Court’s progressive decision, which is a positive step towards enhancing legislative accountability and reaffirming Uganda’s commitments under regional and international human rights instruments, there is no ultimate guarantee that the right to fundamental freedoms and civic liberties guaranteed by the Constitution will be respected.

It should be noted that the Court’s decision largely focused on procedural issues rather than examining the constitutional guarantees on freedom of expression and access to information. This leaves open the possibility that similar provisions could be reintroduced if proper legislative procedures are followed.

Continuous advocacy for progressive provisions remains necessary.

Given the volatile nature of Uganda’s digital space, there is a need for Parliament to ensure harmonisation of national laws with regional and international standards, conduct wide consultations on proposed laws, and undertake human rights impact assessments.

CIPESA welcomes the current judgement as progressive but emphasises the need for decisiveness in implementation of the orders by the court. Without sustained vigilance, restrictive laws in addition to the Uganda Communications Act, Public Order Management Act, Uganda Peoples Defence Forces Act, the Regulation of Interception of Communications Act and the Anti-terrorism Act may re-emerge in different forms.

The protection and promotion of civil liberties in digital spaces must remain a priority.

Human Rights Implications of Health Care Digitalisation in Kenya

By CIPESA Writer |

The evolution of digital health is largely driven by technological advancements, the quest for more efficient healthcare, and the growing demand for available, accessible, affordable and quality services. The United Nations’ 2030 Agenda for Sustainable Development recognises the transformative potential of Information and Communications Technology (ICT) in fostering human progress, bridging digital divides, and creating knowledge societies. Despite technological advancements, the World Health Organization (WHO) notes that many countries, including Kenya, have yet to fully leverage digital health for positive outcomes. 

​​The transition from the National Health Insurance Fund (NHIF) to the Social Health Insurance Fund (SHIF) presents a policy shift towards realising Universal Health Coverage (UHC) in Kenya. However, this transition has faced significant challenges that impact the right to health, particularly for vulnerable and marginalised groups (VMGs). A major concern within this transformation is the role of digitalisation in health care management and its implications for service delivery. 

It is against this background that the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), the Danish Institute for Human Rights and the Kenya National Commission on Human Rights (KNCHR) undertook a human rights impact assessment on digitalisation of the health care sector in Murang’a, Laikipia, Kisii and Homabay counties in Kenya. The assessment included the NHIF to SHIF transition, digitalised solutions in the sector and their potential impacts especially on Vulnerable and Marginalized Groups (VMGs) to access quality health care.

This report presents the findings of the assessment which was conducted through literature review and field data collection, as elaborated in the methodology section below. The report highlights the positive impacts of digitalisation of health services, pressing challenges, and impacts on the state of healthcare. It also provides targeted and actionable recommendations for improving the effectiveness, inclusivity, and human rights compliance of digital health initiatives in Kenya.

As an integral part of a human rights-based approach, this assessment took a gender-responsive approach to adequately reflect the experiences of women and to understand gender relations within households and communities. It included a gender-responsive context analysis and representative participation in engagements as well as the conceptualisation, adaptation, and utilisation of existing public sector digital infrastructure for enhanced gender responsiveness.

A Human Rights-Based Approach to public sector digitisation should include Human Rights Impact Assessments (HRIA) in the conceptualisation, development, implementation, and monitoring of digital solutions, and the results thereof should be made publicly available. As such, HRIA is often called for, but examples of such assessments are hard to come by, making few public examples of HRIA of public digitalisation products. Therefore, this assessment documents and shows outcomes that may serve as a model and practical guidance for conducting future human rights impact assessments in the public sector in Kenya and beyond.

Read the full report here.

The AU Disability Protocol Comes Into Force: Implications for Digital Rights for Persons with Disabilities in Africa

By Paul Kimumwe & Michael Aboneka |

On this International Day for Persons with Disabilities, CIPESA reflects on the impact of the African Union (AU) Disability Protocol and its Implication on digital rights for persons with disabilities in Africa and calls upon the African Commission to establish a Special Mandate to enhance the respect for and protection of the rights for persons with disabilities in Africa

Six years after its adoption, the Protocol to the African Charter on Human and Peoples’ Rights on the Rights of Persons with Disabilities in Africa came into force in May 2024 after securing the mandatory 15th ratification by the Republic of Congo. The other 14 African Union member states that have ratified the Protocol are Angola, Burundi, Cameroon, Kenya, Mali, Malawi, Mozambique, Namibia, Nigeria, Niger, Rwanda, South Africa, the Sahrawi Arab Democratic Republic, and Uganda. 

For disability rights activists, this was a defining moment as the protocol augments the rights of persons with disabilities to barrier-free access to the physical environment, transportation, information, and other communication technologies and systems. Specifically, under articles 23 and 24 of the protocol, States Parties should take “effective and appropriate measures” to facilitate the full enjoyment by persons with disabilities of the right to freedom of expression and opinion and access to information, including through the use of Information and Communication Technologies (ICT).

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) has been a longstanding advocate for African governments to urgently ratify the protocol. However, CIPESA has also stated, including in submissions to the Africa Commission on Human and People’s Rights (ACHPR), that ratifying the protocol would be a major but insufficient step in ensuring that persons with disabilities access and use digital technologies and that there is sufficient disaggregated data to inform programme interventions.

Indeed, article 24(2) requires States Parties to put in place policy, legislative, administrative, and other measures to ensure that persons with disabilities enjoy the right to freedom of expression and access to information on an equal basis, including:

  1. Providing information intended for the general public as well as information required for official interactions with persons with disabilities in accessible formats and technologies appropriate to different kinds of disabilities in a timely manner and without additional cost to persons with disabilities. 
  2. Requiring private entities that provide services to the general public, including through the internet, to provide information and services in accessible and usable formats for persons with disabilities. 
  3. Recognising and promoting the use of sign language. 
  4. Ensuring that persons with visual impairments or with other print disabilities have effective access to published works, including by using information and communication technologies.

The protocol adds to the available digital rights advocacy tools for disability rights actors, including the 2006 United Nations Convention on the Rights of Persons with Disabilities (CRPD), which places significant obligations on States Parties to take appropriate measures to ensure that persons with disabilities have equal and meaningful access to ICT, including the internet. 

The CRPD was the first international human rights treaty requiring the accessibility of digital tools as a prerequisite for persons with disabilities to fully enjoy their fundamental rights without discrimination. It highlights the inherent risks of exclusion of persons with disabilities from participating equally in society by defining ICT accessibility as integral to general accessibility rights and on par with access to the physical environment and transportation.

While there has been some progress in the enactment of disability rights-respecting and ICT-enabling laws for persons with disabilities in Africa, implementation is a challenge. Moreover, the Protocol comes into force when the digital divide and exclusion of persons with disabilities has worsened despite the exponential growth and penetration of digital technologies on the continent. Persons with disabilities have consistently remained disproportionately excluded from the digital society due to factors such as low levels of ICT skills, high illiteracy levels, and high cost of assistive technologies such as screen readers, screen magnification software, text readers, and speech input software.

It is against this background that CIPESA adds its voice to other calls to the African Commission to expedite the establishment of a special mandate at the level of Special Rapporteur for Persons with Disabilities. This elevated position will ensure that the rights of persons with disabilities in Africa are mainstreamed and upheld.

CIPESA recognises that as a regional human rights instrument, the protocol empowers disability rights actors to demand the enactment and full implementation of policies and laws that promote the rights of persons with disabilities, including in accessing and using digital technologies.

For example, disability rights actors, including civil society, activists, and Disability Rights Organisations (DPOs), should develop mechanisms to monitor the status of implementation of the protocol, including ensuring that the states parties submit their statutory reports as required by Article 34 of the protocol. The DPOs should also actively participate in developing shadow reports on the status of implementation of the protocol, especially on access to information and participation in public affairs.

In addition, disability rights organisations should work with policymakers and the executive to ensure that more countries ratify the protocol and domesticate it through national policies, laws, and practices. Both the protocol and the CRPD should become a reference point during any discussions of draft laws and policies that affect persons with disabilities.

For the media, it is important that, through their reporting, they hold governments accountable for failure to ratify or to fully implement the provisions of the protocol.

Member countries can also demand for accountability of their peers on the status of implementation of the key provisions of the protocol through the African Peer Review Mechanism (APRM).

Please read more about CIPESA submissions on policy actions governments should take after ratifying the protocol. See also The Disability and ICT Accessibility Framework for Monitoring the Implementation of ICT Accessibility Laws and Policies in Africa.

African Commission Resolution to Bolster Data Governance

By Edrine Wanyama |

The Resolution adopted by the African Commission on Human and Peoples’ Rights (ACHPR) during its 81st Ordinary Session held from October 17 to November 6, 2024 in Banjul, The Gambia potentially bolsters data protection and governance on the African continent.

The Resolution calls upon states parties to take all relevant measures to ensure transparent and accountable collection, processing, storage and access to data. It also underscores the importance of ethical principles in data usage, equitable access to data, and addressing biases to prevent structural inequalities while safeguarding privacy and combating discrimination.​

The resolution acknowledges the rapid advancement of technology and the increased dependence on data in governance and socio-economic development, and is in line with the African Union Convention on Cyber Security and Personal Data Protection, African Union’s Data Policy Framework, and the Digital Transformation Strategy for Africa (2020–2030).

Similarly, this timely resolution aligns closely with the vision of the Global Digital Compact (GDC), which calls for inclusive, rights-based governance of digital technologies and artificial intelligence (AI), and the ACHPR’s Resolution 473 on the need to undertake a study on human and peoples’ rights and AI, robotics and other new and emerging technologies. These frameworks emphasise the potential of data and digital technologies while cautioning against risks such as bias, inequities, unwarranted surveillance, and privacy violations.

By embedding human rights principles in digital governance, both the ACHPR’s Resolution 473 and the GDC advocate for responsibly leveraging digital tools to reduce inequalities and protect vulnerable populations. The ACHPR’s focus on equitable data access and capacity-building within African states resonates with the GDC’s call for global collaboration to address disparities in digital infrastructure and skills. Together, these initiatives present a unified agenda to ensure that digital technologies and AI are harnessed for equity, justice, and sustainable development that foster a shared vision for a more inclusive digital age.

The ACHPR Resolution further urges state parties to ensure open access to data which is in possession of public and private in public interest, in accordance with the prescribed regional and international human rights standards.

The Resolution reinforces the African Union’s Data Policy Framework which, among others, seeks to maximise the benefits of the data-driven economy for African countries. With common anticipated benefits, data governance systems will be harmonised to enable secure and free data flow on the continent which potentially contributes to a people-centred approach which is not inward-looking for individuals, institutions and businesses and, enhances data utility for accelerated attainment of Agenda 2063 and the Sustainable Development Goals (SDGs).

There is increasing recognition of the need for data governance frameworks that create a safe and trustworthy digital environment, foster intra-Africa digital trade, enable states’ cooperation on data governance, enable domestication of continental policies, and ensure free and secure data flows across the continent. As such, the  Resolution also calls for the establishment of collaborative mechanisms, coordinating data issues, enabling and facilitating competitiveness in the global economy, promoting sustainable data use and benefits to society, as well as facilitating innovative ways to promote and maximise benefits of data for the African peoples.

Besides, the Resolution will potentially grow the impetus of Regional Economic Communities (RECs) to adopt harmonised data governance systems, which will quicken continental initiatives such as the African Continental Free Trade Area (AfCFTA) Agreement whose growth and benefits depend on secure and free cross-border data flows. For instance, the East African Community (EAC) and the Southern African Development Community (SADC) are set to develop regional data governance policy frameworks with the aim of harmonising data governance in the region for economic growth and regional integration.

The Resolution echoes sentiments shared in various panels at the September Forum on Internet Freedom in Africa 2024 (#FIFAfrica), which highlighted contemporary issues in data governance in Africa, including in collection, management, and processing of data. The Forum emphasised the role of national and regional actors in policy harmonisation, enabling greater cross-border data flows, maximising the benefits of data for all countries and all citizens, and the need for greater privacy protections over personal data. Among others, speakers at FIFAfrica singled out  national parliaments, RECs, civil society organisations, the African Union, and the private sector as having pivotal roles to play in promoting effective data governance.

Explorer le paysage complexe des droits numériques au Sahel : Parole aux défenseurs

Par Simone Toussi |

Les pays de la région sahélienne, tels que le Burkina Faso, le Mali et le Niger, présentent un environnement périlleux pour les défenseurs des droits humains, au moment où des régimes militaires s’enlisent au pouvoir. L’espace numérique, autrefois perçu comme un symbole de liberté d’expression et d’accès à une information plurielle, est progressivement assiégé, les droits à la vie privée, à la liberté d’expression et à l’accès et au partage d’informations y étant de plus en plus restreints.

Si ces pays font face à des problématiques numériques communes à d’autres pays francophones d’Afrique – interruptions d’Internet, surveillance étatique, censure en ligne et instrumentalisation des lois sur la cybersécurité et la désinformation –, le renversement des gouvernements civils par l’armée y a aggravé le niveau d’autoritarisme.

Lors du Forum sur la liberté de l’Internet en Afrique – organisé par la Collaboration sur les Politiques Internationales des TIC pour l’Afrique de l’Est et Australe (CIPESA) et AfricTivistes en septembre 2024 à Dakar, Sénégal – des experts se sont réunis pour discuter des défis croissants et des opportunités en matière de droits numériques dans la région. Le panel a élucidé la position précaire des défenseurs des droits humains et le rôle ambivalent des technologies numériques, qui exacerbent autant qu’elles offrent des solutions à ces défis.

Dans le cadre des efforts de CIPESA pour lutter contre les troubles de l’information en Afrique subsaharienne et équiper les acteurs au plaidoyer pour de lois numériques plus justes, le panel a abordé des questions critiques relatives aux droits numériques ainsi que des problématiques sociales pressantes comme l’inégalité de genre, les conflits armés et la détérioration de la liberté de la presse, tout en examinant le cadre réglementaire émergent y afférent.

Les défenseurs des droits humains au Sahel, notamment les activistes pour les droits des femmes et les journalistes, rencontrent d’immenses difficultés en raison de l’instabilité politique, de la violence armée et des régimes autoritaires, qui imposent de sévères restrictions à la liberté de la presse, à la circulation de l’information et aux activités de la société civile.

Djibril Saidou, de International Media Support (IMS), a souligné que les défis des droits numériques au Sahel vont au-delà de la protection de la liberté d’expression. « Il s’agit de garantir l’accès à l’information sur des questions urgentes comme les droits des femmes et les conflits armés », a-t-il déclaré. Dans ces contextes difficiles, il a affirmé que les efforts d’intervention devraient se concentrer sur la résistance à la censure et le renforcement de la résilience des défenseurs des droits numériques et de la démocratie.

Chantal Nare, blogueuse féministe de Bloggueuses226 et activiste burkinabè, a partagé son expérience de militante pour les droits des femmes dans un environnement aussi fragile. Elle a évoqué la peur constante de représailles et de surveillance, qui entrave l’expression libre, même sur les plateformes numériques. Chantal a soulevé une question cruciale : « Comment les plateformes numériques comme WhatsApp ou les blogs peuvent-elles être utilisées pour protéger et autonomiser les femmes sans les exposer à davantage de risques face aux acteurs étatiques ou extrémistes ? »

Urbain Yameogo, du Centre d’Information et de Formation sur les Droits Humains en Afrique (CIFDHA), a cité l’abus des lois sur la cybercriminalité et le terrorisme pour restreindre la liberté d’expression. « La loi antiterroriste de 2015 au Burkina Faso permettait aux journalistes un certain accès à des informations sensibles liées au terrorisme. Cependant, les révisions du Code pénal en 2019 ont supprimé ces exemptions, exposant les journalistes à des poursuites pour des actes qu’ils exerçaient dans le cadre de leur travail, comme l’accès aux sites liés au terrorisme. Cette modification a créé une zone grise juridique qui rend les journalistes et les défenseurs des droits humains vulnérables à des persécutions. »

Les panélistes ont souligné que les journalistes de la région, rapportant sur des sujets sensibles comme le terrorisme et les violations des droits humains, sont de plus en plus poursuivis sous des lois sur la cybercriminalité, plutôt que sous les lois traditionnelles sur la presse, qui offraient historiquement plus de protection. Ce changement compromet les droits des journalistes à rapporter librement, car les lois sur la cybercriminalité, souvent mal définies, peuvent être interprétées de manière extensive pour réprimer un travail journalistique légitime.

Face au défi de défendre les droits numériques dans un climat de peur des représailles des régimes militaires, certains participants ont souligné la nécessité d’exercer une prudence extrême et d’adopter une approche conciliatrice dans leur travail. Cheikh Fall, de l’organisation régionale des droits humains AfricTivistes, a affirmé : « Parfois, il faut choisir entre la vie et la liberté. Dans les pays du Sahel sous régime militaire, les droits numériques sont éclipsés par le besoin immédiat de survie. Cette réalité souligne que la lutte pour les droits humains fondamentaux est indissociable du combat pour la liberté. »

Des propositions ont été faites pour créer des lois unifiées traitant à la fois des enjeux numériques et médiatiques. Cependant, étant donné les craintes que ces lois puissent renforcer la répression plutôt que protéger les libertés, un dialogue inclusif et des processus politiques participatifs ont été jugés cruciaux. Cela permettrait de garantir une meilleure protection non seulement pour les journalistes et les défenseurs, mais aussi pour les femmes et d’autres groupes vulnérables. À cet égard, Chantal Nare a appelé à une législation englobant les formes de répression physique et numérique.

Outre les réformes juridiques, les panélistes ont également insisté sur la nécessité d’une formation renforcée à la sécurité numérique et d’une collaboration accrue entre les acteurs locaux et internationaux.

1 2 3 9