Addressing Online Harms Ahead of Rwanda’s 2026 UPR Review

By Patricia Ainembabazi |

As the world commemorates the 16 Days of Activism Against Gender-Based Violence (November 25 to December 10), global attention is drawn to the rising risks women and girls face in digital environments. These harms increasingly undermine political participation, public discourse, and the safety of women across Africa.

Accordingly, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and the Association for Progressive Communications (APC) have stressed the urgent need to address technology-facilitated gender-based violence (TFGBV) in Rwanda in written and oral submissions to the Universal Periodic Review (UPR) 51st pre-session for Rwanda at the United Nations Human Council in Geneva. In a joint CIPESA–APC fact sheet on human rights, the two organisations highlighted critical gaps in legal protections, online safety, and digital inclusion in Rwanda.

The joint UPR report notes that TFGBV has become a major deterrent to Rwandan women’s participation online, affecting women in politics, journalism, activism, and advocacy. The 2024 online smear campaign against opposition figure Victoire Ingabire Umuhoza illustrates the gendered nature of digital disinformation and harassment. Such attacks rely on misogynistic narratives designed to humiliate, silence, and delegitimise women’s public engagement. This pattern is not only a violation of rights; it also reinforces structural inequalities and dissuades other women from engaging in civic or political life.

These concerns reflect global trends. UN Women has warned of the rapid escalation of deepfake pornography, a form of digitally manipulated sexualised content disproportionately deployed against women and girls. Deepfakes can cause severe psychological, reputational, and professional harm, often leaving survivors without effective avenues for redress. They are increasingly used to silence women, distort electoral participation, and discourage women from entering political leadership. Such harms undermine democratic processes, distort public debate, and entrench gender inequality.

Rwanda’s obligations under the Convention on the Elimination of All Forms of Discrimination Against Women (CEDAW) require the state to take comprehensive measures to eliminate discrimination (Articles 2 and 3) and ensure women’s full participation in political and public life (Article 7). However, as documented in the joint UPR report and fact sheet, gaps persist. The 2018 Cybercrime Law lacks survivor-centred provisions, and its broad definitions have on occasion been applied in ways that disadvantage victims.

Moreover, enforcement remains inconsistent, and the absence of specialised mechanisms for investigating and prosecuting online violence limits accountability. In this context, TFGBV is not merely a digital phenomenon; it is a direct barrier to fulfilling Rwanda’s CEDAW obligations and achieving SDGs 5 and 16.

The gender digital divide further compounds these harms. Internet penetration in Rwanda stands at 34.2%, with women representing just 38.2% of social media users. Structural inequalities, including device affordability, income disparities, and limited digital literacy, restrict women’s participation in digital spaces. These inequalities heighten vulnerability to online harm and restrict access to safety tools, reporting mechanisms, and digital rights resources. As the joint CIPESA–APC evidence indicates, without targeted investment in digital literacy, device access, and connectivity for women, Rwanda risks deepening existing socio-economic and civic inequalities.

During the UPR pre-session, CIPESA and APC presented a set of recommendations aimed at promoting rights-respecting digital governance. These included adopting survivor-centred TFGBV protections aligned with CEDAW, strengthening investigative and prosecutorial capacities to effectively respond to online harms, and compelling technology platforms to improve reporting, moderation, and accountability mechanisms. The submission also called for amending restrictive provisions in the Penal Code and Cybercrime Law, establishing independent oversight over surveillance operations, and addressing the gender digital divide through targeted digital literacy and affordability initiatives.

The 16 Days of Activism provide an important reminder that violence against women is evolving in both form and reach. Digital technologies have expanded the avenues through which women are targeted, often enabling harm that is faster, more pervasive, and harder to remedy. Ending violence against women, therefore, requires recognising online spaces as critical sites of protection.

Rwanda enters its fourth UPR cycle with a number of unaddressed commitments. During the 2021 review, the Rwandan government received 32 recommendations on freedom of expression and media freedom, including 24 urging reforms to restrictive speech provisions and 17 calling for enhanced protections for journalists and human rights defenders. Yet implementation has been limited. Provisions in Rwanda’s 2018 Penal Code and 2018 Cybercrime Law continue to criminalise “false information”, edited content, and criticism of public authorities, enabling arrests of journalists and discouraging dissenting expression.

These laws have contributed to widespread self-censorship, shrinking civic space, and undermining public participation in digital environments. At the same time, reports of intrusive surveillance, such as the documented use of Pegasus spyware targeting thousands of journalists, activists, and diaspora members, further erode trust and violate privacy rights. The absence of independent oversight in surveillance practices intensifies this concern.

The Country’s ongoing engagement with the UPR process and its upcoming review scheduled for January 21, 2026, offers a timely opportunity to address these challenges. During the pre-sessions 51 from 26 -27 November 2025 in Geneva, several permanent missions expressed eagerness to advance strong recommendations for Rwanda, and there is hope that these delegations will amplify our proposals during the formal review.

CIPESA and APC remain committed to supporting evidence-based reforms that strengthen digital rights protections across Africa. Rwanda’s review presents a defining moment for the government to adopt meaningful, future-focused reforms that uphold human rights, ensure accountability, and create a digital environment where all citizens, especially women, can participate safely, freely, and equally in shaping the country’s democratic and digital future.

CIPESA and PALU Challenge Rwanda to Address Digital Rights Gaps in UPR Review

By Edrine Wanyama |

Rwanda’s digital rights record has been assessed by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and the Pan African Lawyers Union (PALU) in a joint submission to the United Nations Human Rights Council. The review contributes to the efforts of the Universal Periodic Review (UPR) mechanism to strengthen human and digital rights within the country. Notably, the review underscores the urgent need for reforms to safeguard freedom of expression, privacy, and digital inclusion in the face of evolving technologies and governance challenges.

The report highlights positive progress such as the enactment of the Data Protection and Privacy Law (Law No. 058/2021) which protects individuals’ data and establishes the Rwanda National Cyber Security Authority (NCSA) to oversee personal data management. The report also notes the establishment of the Irembo platform, which serves as a basis for enhancing access to public services.

Through the National Strategy for Transformation (NST2) for the period 2024 to 2029, the Rwanda government aims to attain 100% e-service access for Rwandans by 2030, including through enhancing digital skills and literacy under the Digital Ambassadors Programme. There have also been concerted efforts aimed to ensure the financial inclusion of women.

Nevertheless, fundamental freedoms, including free expression, access to information, assembly and association, remain severely restricted in the country. The report observes elevated and systematic threats and intimidation, harassment, arrests and detention and prosecution of government opponents and critics, human rights defenders (HRDs), journalists, and other online activists. This has had a chilling effect on the exercise of freedoms. Access to several websites has been blocked on government orders, while victims of government wrath are often slapped with lengthy prison sentences, which also serves as a tool to silence those who do not agree with the government.

Digital inclusion is also still a major challenge, especially for women, persons with disabilities and the rural populace. According to the report, digital inclusion continues to have adverse effects on the exercise of online rights and freedoms, although the country has a high broadband coverage (99%). Smart phone penetration remains low at 22% and the majority of citizens do not use the internet. The high taxes and high internet costs have further aggravated the inclusion gap.

In terms of its data protection landscape, the report acknowledges the positive step of enacting the Data Protection Act, but notes that the law is weak, lacks strong safeguards such as judicial oversight, and contains a substantively less effective redress mechanism.

Moreover, the report underscores that there is enhanced surveillance of individuals and their communications using sophisticated spyware and malware, such as NSO Group’s Pegasus spyware, and the extensive Closed Circuit Television (CCTV) networks. The surveillance has been deployed to target, threaten and intimidate journalists and other critics.

The report makes several recommendations to the committee to consider if the human rights record of Rwanda in online spaces is to be improved. These recommendations call on the government of Rwanda to:

  • Decriminalise defamation and review vague laws used to suppress freedom of expression and peaceful dissent.
  • Establish independent oversight over surveillance practices and introduce judicial safeguards to protect privacy.
  • Strengthen the implementation of the Access to Information law and ensure that public bodies proactively disclose information.
  • Enhance the capacity of the Rwanda National Cyber Security Authority to enforce data protection while ensuring its independence from executive interference.
  • Promote inclusive digital access, especially for women, persons with disabilities, and rural communities.
  • Cease censorship and arbitrary removal of online content, and establish transparent mechanisms for content moderation.
  • Establish a favourable and safe environment for operations of human rights defenders, journalists and other online activists as opposed to persecuting them by repealing or amending laws to provide for rights-respecting provisions.
  • Prohibit and penalise tech-facilitated gender-based violence especially against women and ensure their access to timely and effective redress.
  • Investigate all cases of enforced disappearance, ensuring punishment for any perpetrators and justice for survivors and their family members.
  • Make strong and repeated public statements at the highest government levels to make clear that all law enforcement authorities and investigation agencies should comply with the law, and that all detained people must be brought to court within 24 hours.
  • Embrace universal design and ensure its full integration into the IremboGov platform to cater for and ensure that persons with disabilities especially visual impairments have full access to all of its services.

  See full Report here.

Participant Reflection on #FIFAfrica22: Effective Engagement in the UPR Process for Digital Rights Promotion

By Murungi Judith |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and Small Media held a workshop on the Universal Periodic Review (UPR) process as part of  Forum on Internet Freedom in Africa (FIFAfrica 22), which was held in Lusaka Zambia from September 26-29, 2022. The workshop is a product of the UPROAR project aimed at advancing the cause of digital rights globally by supporting engagement in international advocacy at the UPR. 

The 32 participants at the workshop represented a diverse array of backgrounds including  civil society, digital rights activism and advocacy, legal, journalism, and academia.  A total of  20 countries were also represented -Benin,Burundi, Botswana,  Cameroon, Democratic Republic of Congo, Ethiopia, Ghana, India Kenya, Mozambique, Nigeria,  Senegal, Sri Lanka, Sudan, Tanzania,Uganda,United Kingdom, United States of America, Zambia, and Zimbabwe.

The workshop entailed an overview of the UPR, its  purpose and the processes. Also included were in depth  discussions on international and regional normative frameworks on digital rights. Specific attention was drawn to the Universal Declaration of Human Rights as the first normative framework on freedom of expression. The International Convention on Civil and Political Rights (ICCPR) was also explored under the core tenets of the right to hold opinions without interference (freedom of opinion), the right to seek and receive information (access to information) and the right to impart information (freedom of expression).

It was noted that the right to freedom of expression is not absolute and that the three-part test is key in determining the circumstances which potentially justify limitations. Under Article 19 (2) of the ICCPR, limitations are specifically listed as ( i) it must be provided for in law (ii) it must pursue a legitimate aim (iii) it must be necessary for a legitimate purpose.

The three-part-test formed the basis of heated debate related to electoral democracy and internet shutdowns in countries like Cameroon and Tanzania when compared to Kenya where the government did not impose an internet shutdown during their recent elections. As a result of the comparative discussions, participants reached  the conclusion that there are still actions of governments that are a threat to internet freedom such as arrests, detention and assassination of some journalists. It is the responsibility of civil society, activists and human rights defenders to hold governments accountable through the use and increased participation in the UPR process. 

The presence of Hon. Neema Lugangira from Tanzania, a member of Tanzanian Parliament and the Chairperson of the African Parliamentary Network on Internet Governance in the sessions was priceless and a beacon of hope in bridging the gap between civil society and policy makers towards promoting digital rights through the UPR.

The workshop also explored various case law on freedom of expression in Africa including precedent such as in Lohé Issa Konaté v Burkina Faso. Participants deliberated on the relevance of evaluating and critically assessing the law and ensuring that cases are framed in a manner that is in line with the jurisdiction of the particular court of law approached without which matters could be thrown out. This session gave the participants a clear understanding of the link between offline and online rights and specific laws that apply to minority and marginalised groups such as children, women, persons with disabilities and other vulnerable communities. 

The session on campaign and advocacy planning aimed at equipping participants with the necessary tools required to engage partners on how to carry out campaigns and to execute advocacy strategies through the UPR. It highlighted the eye-catching and precise advocacy materials that could be used in social media as well as other platforms for the UPR at local level. It led to discussions on the critical role played by local stakeholders in leveraging the UPR for digital rights development in their various contexts. The session helped the participants understand how to engage with local partners and to ensure that there is effective implementation of recommendations made to their respective countries. This involved fact sheets and how to use them during the UPR process. 

Participants engaged in a practical lobbying session where they had to appear before a UN delegate and present the issues affecting digital rights in their respective countries and recommendations for reform. This practical group exercise was very beneficial and informative because it gave the participants a chance to apply what they had learnt in regard to the UPR process. It gave them an opportunity to experience the review process at Geneva. 

Through the UPROAR Website, participants were guided on how to leverage research and social media platforms online for effective design and branding as part of UPR engagements  related to digital rights. The workshop also entailed guidance on what stakeholder mapping is and its importance.

In a subsequent panel entitled ‘Stemming the Tide: Has the Universal Periodic Review Mechanism Contributed to Changes in the Digital Rights Landscape of States Under Review?’ panelists shared experiences from Namibia, Democratic Republic of Congo, Uganda, Rwanda and many others. This gave the participants in the workshop an understanding on how to prepare for stakeholder engagements and how to conduct evidence-based advocacy at the United Nations Human Rights Council.

It was noted that the Covid-19 pandemic led to the imposition of travel restrictions which caused difficulties in traveling to Geneva to physically participate in the UPR process. Online opportunities were a welcome alternative but the lack of reliable internet access among civil society on the continent during the sessions presented an additional barrier

Beyond making submissions and engaging during review sessions, participants were urged to also take part in monitoring recommendations. Experiences were shared about governments such as that of Uganda which rejected all the recommendations that were given in regard to digital rights. In such instances participants were encouraged not to give up and draw back due to such government response but to keep doing the work of advocacy in line with digital rights since the same is also a notable step in the right direction. They were also encouraged to collaborate with law and policy members to ensure that they know about the UPR process and that they are able to positively respond to the recommendations given. They were also encouraged to ensure that there is in-country pressure from civil society to ensure that governments act on the recommendations given to them. It was noted that in Tanzania there has been a significant increase in the acceptance of recommendations after there has been collaboration between civil society and parliamentarians.  

The UPR sessions at FIFAfrica22 were very informative and intriguing as it engaged well-equipped workshop trainers. Experiences from those who had participated in Geneva engagements on digital rights stirred the urge for proactive engagement and participation by those coming up for review like Botswana.

Advancing Internet Freedom in Africa Through the Universal Periodic Review: Lessons and Gaps

By CIPESA Staff Writer |

Since its establishment in 2006, the Universal Periodic Review (UPR) has provided a unique process for reviewing the human rights records of all United Nations (UN) Member States. Over the years, however, there has been limited participation by African civil society in the review process. In particular, there is limited work by African actors to promote internet freedom through this process.

Accordingly, since 2018, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), Small Media Foundation and a coalition of regional partners have been working to support civil society organisations across Africa to engage with the UPR process through capacity development in research and advocacy. The project has made up to 16 UPR submissions on digital rights in Africa with a focus on the Democratic Republic of Congo, Ethiopia, the Gambia, Kenya, Liberia, Malawi, Mozambique, Namibia, Nigeria, Rwanda, Senegal, Sierra Leone, South Sudan, Tanzania, Uganda and Zimbabwe

To further concretise CIPESA and Small Media’s efforts, a survey was commissioned to gauge the awareness, engagement and existing capacities of stakeholders in relation to the UPR process and their development needs with regard to UPR advocacy, campaigning, and research. Conducted between July 2019 and December 2021, the survey recorded a total of 134 respondents from all 16 countries on which CIPESA, Small Media and partners made UPR submissions focused on digital rights. The respondents included activists, academics, diplomats, lawyers, journalists, government officials, development actors, and civil society organisations. 

The survey found that there is limited participation by African civil society in the UPR process despite the review process providing a framework within which activists and human rights defenders can lobby and hold governments to account to promote internet freedom. The number of internet freedom-related submissions on Africa is still small though growing, which is a reflection of the low number of actors conducting internet freedom work and participating in UPR reviews. 

While there is a relatively high level of awareness of the existence of the UPR process, partly the result of training efforts by various organisations in recent years, the level of knowledge about the process is limited. Similarly, the level of participation in the review is moderate, with only 27% having taken part in national consultations and one in four having participated in submission of stakeholder reports. It is also noteworthy that even for those processes that many respondents had participated in, such as stakeholder submissions, those efforts were often led by entities based outside the continent. Only one third of respondents had ever received UPR-related capacity development.

The survey findings indicate the need for skills and knowledge development in UPR engagement including advocacy and follow-up on recommendations; making stakeholder submissions; and participating in national consultations and review sessions. Further, it is crucial to capacite legacy human rights organisations to embrace digital rights work. Other skills development needs identified included data collection; analysis and report writing to feed into submissions; stakeholder engagement; and diplomacy and international negotiations. 

Specifically on digital rights, skills building in understanding the legal and regulatory environment for the digital sector at national, regional and global levels, as well as coalition building strategies, and communications for advocacy, were identified. Other skills needed included digital security for human rights  defenders; knowledge of the full range of the UN Human Rights Mechanisms; and crafting human rights policy recommendations.

In line with the capacity gaps identified by the survey, CIPESA and Small Media convened CSOs, activists and human rights defenders from the 16 countries for a three days workshop on UPR advocacy and coalition building for digital rights. The workshop, which was held in Kampala, Uganda on March 20-22, 2022, featured sessions on local engagement and mobilisation, international and regional legal frameworks, researching digital rights and identifying policy issues, campaign and advocacy planning and impact communications, among others.  

Speaking at the opening of the workshop, CIPESA’s Programme Manager Ashnah Kalemera stated that the training sought to capacitate organisations to more effectively leverage the UPR for advancing digital rights. “Increasing African-based organisations’ participation in the UPR, national level uptake and follow up on recommendations by governments requires growing skills and engendering collaboration among stakeholders,” said Kalemera.

The workshop builds on CIPESA’s multi-country efforts in building skills and knowledge in collaborative internet policy research, research methods, communicating research, and data-driven advocacy, among others, towards a free, open and secure internet in Africa.

See the Internet Freedom and UPR in Africa Survey report here.

CIPESA, Small Media Make Stakeholder Submissions to the United Nations Human Rights Council on Digital Rights in South Sudan, Uganda and Zimbabwe

By Ashnah Kalemera |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) together with Small Media last week made joint stakeholder submissions on digital rights in South Sudan, Uganda and Zimbabwe to the United Nations Human Rights Council.

The submissions were made as part of the Universal Periodic Review (UPR) mechanism which is an assessment of a country’s human rights under the auspices of the Human Rights Council. Every United Nations (UN) member state has its human rights record assessed, and all UN member states are involved in the review process. It happens every four-and-a-half years, for every state.

The submissions urge the three countries to ensure that rights to freedom of expression, freedom of information, equal access and opportunity as well as data protection and privacy are protected both offline and online pursuant to constitutional guarantees, regional and international instruments. Based on developments since the three countries’ previous UPR back in November 2016, the submissions make recommendations to be considered during the upcoming third cycle of the UPR, tentatively scheduled for November 2021.

The South Sudan submission was made in partnership with Defy Hate Now and supported by eight institutions – Rise Initiative for Women’s Rights Advocacy (RiWA), Freedom of Expression Hub, Koneta hub, Okay Africa Foundation, Anataban Initiative, IamPeace, Internet Governance Forum (IGF) South Sudan and Information Communication Technology for Development (ICT4D) Network.

The submission for Uganda was supported by Access Now, Freedom of Expression Hub, Women of Uganda Network (WOUGNET), Internet Society – Uganda Chapter and Pollicy.

Access Now, Paradigm Initiative, Zimbabwe Human Rights Association, Association for Progressive Communication (APC), Zimbabwe Lawyers for Human Rights, Zimbabwe Centre for Media and Information Literacy (ZCMIL), Media Alliance of Zimbabwe supported the Zimbabwe Submission.

Read the full submissions:

The three submissions bring to 14 the total number of UPR submissions made by CIPESA and Small Media on digital rights in Africa since 2018. Previous submissions made include: Ethiopia, the Gambia, Kenya, Malawi, Mozambique, Namibia, Nigeria, Rwanda, Senegal, Sierra Leone, and Tanzania