State of Internet Freedom in Africa 2018 Published by CIPESA, September 2018
Total Page:16
File Type:pdf, Size:1020Kb
10 001 0 10 001 010 01 010 100 1 001000100000 0010 0100 01000100 0101001 100 0100 1001 010001 010 010010 00010 1000100000001 01 100 1000000100010000100010010 100010001000000100 01001 0010100 01000 10001 00001 00100101 0101010 0101 0101 01000 1000 10001 01001010001001001 0000100 0 0010 01010 01001 001 0001010 000 0 0 0 0 10 101 01 1001 01 001 010 10010 10001 01 0100 1001 0100 10010 1001 0100 0 0 0 0 0 0 00 0 00 0 1 1 0 100 1000 100 100 1001 010 100 0 00 1 0 10 010 00 100 1001 0 State of Internet 0 1 01 01 0 10 Freedom 01 10 01 00 10 1000 0 0 0 1 001 01 01 010 10 0 0 0 1 0 10 01 00 10 0 0 00 10 0 10 10 100 10 000 000 10 10 01 0 0 01 0 10 01 000 1 0 01 01in 01 0 0Africa 000000 00 0001 0002018 1000 100 010 01 001 00 0 0 0 0 0 10 01 001 1 1 1 00 1 00 1 01 000 10 0 010 0 00 01 000 100 1 00 00 0 01 000 0 01 000 10 01 00 100 010 00 10 00 10 1 0 010 0100111 1 1 0 0 0 1 0 0 1 000 10 01 00 0 0 0 10 0 1 WƌŝǀĂĐLJĂŶĚĂƚĂWƌŽƚĞĐƟŽŶŝŶƚŚĞŝŐŝƚĂůƌĂ͗ 0 0 0 1 0 00 00 1000 01 0000 100 01 000 01 0001 0 0 00 00 001 0 0 000 01 01ŚĂůůĞŶŐĞƐĂŶĚdƌĞŶĚƐŝŶĨƌŝĐĂ 000 1 000 1 00 1 000 1 0 10 01 001 01 001 0001 0001 00 0 10 10 01 001 001 0001 00 010 0001 0001 000 100 010 0 10 10 0 11 01 10 1 01 111 0 1 0 10 01 0 10 01 00 000 10 0 10 10 01 00 1 00 100 01 September 2018 0 0 10 0 01 00 100 01 00 00 10 00 1 0 00 0 00 1 0 11 00 0 00 0 00 o 00 00 00 000 0 00 00 0 0 0 0 0 1 1 1 1 0 000 0 00 0 0 0 0 0 1 1 1 1 0 00 0 0 0 0 01 00 00 00 00 10 0 11 0 01 01 10 10 01 1 1 0 100 1010 0 1000 100 100 1 0 00 00000 00 0 0 0 0 0 0 000 00 0 0 0 0 0000 0 0 000 0000 000 00 000 00 0000 0 0 00 00 000 0000 000000 0 000 00 0 1 10 10 10 0 10 0 0 0 0 000 00 0 10 00 10 0 0 001 0001 000 0 0 0 01 010 000 0 0 000 000 00 0 00 000 0 0 0 0 000 00 00 000 00 0 0 00 000 0 000 0 0 0 0 00 0000 000 0000 00 11 0 1000 1 0 000 0 0 00 00 0 0 0 00 00 00 0 00 0 0 0 0 0 0 0 000 0 0 101 0 10 01 0 00 000 00000 01 0 0 000 0 0 0 0 00 000 0 0 000 0000 00 1 001 000 10 00 0 0 0 001 010 01 001 0001 001 001 0 10 10 10 0 000 000 1 010 001 00 0 00 0 00 0 0 00 00 0 000 0 0 0 0 0 0 00 000 00 00 CIPESA 0 00 0 0 0 0 0 0 0 0 0 10 01 00 10 01 0001 001 00100 0 0 0 0 00 0 0 00 0 0 000 00 0 0 0 00 0 0 0000 0 0 0 00 0 0 0 0 00 00 00 00 00 00 0 Credits This research was carried out by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) with support of various partners. This research documents the state of privacy and personal data protection in select African countries, tracking key trends in recent years, analysing the key risk factors, and mapping notable developments on data protection and privacy legislation and violations, and users’ understanding of protecting their privacy online. The study covers Burundi, the DRC, Ethiopia, Ghana, Kenya, Malawi, Nigeria, Rwanda, Senegal, Tanzania, Uganda, Zambia, and Zimbabwe. The research was conducted as part of CIPESA’s OpenNet Africa initiative (www.opennetafrica.org), which monitors and promotes internet freedom in Africa. Research steering committee Ashnah Kalemera, Victor Kapiyo, Paul Kimumwe, Lillian Nalwoga, Juliet Nanfuka, Edrine Wanyama, Wairagala Wakabi, PhD Country researchers Burundi - Jean Paul Nkurunziza, Alain Ndikumana DR Congo - Arsène Baguma Tungali and Blaise Ndola Ethiopia – Berhan Taye and Roman Teshome Ghana – Dora Mawutor Kenya - Kenya ICT Action Network (KICTANet) Malawi – Jimmy Kainja Nigeria – Adaora Okoli Rwanda – Robert Mbaraga Senegal – Ababacar Diop Tanzania – Asha Abinallah Uganda – Daniel Mwesigwa and Edrine Wanyama Zambia – Richard Mulonga Zimbabwe – Natasha Msonza Design Ish Designs [email protected] State of Internet Freedom in Africa 2018 Published by CIPESA, www.cipesa.org September 2018 Creative Commons Attribution 4.0 Licence ‹creativecommons.org/licenses/by-nc-nd/4.0› Some rights reserved. Privacy and Data Protection in the Digital Era: Challenges and Trends in Africa 2 State of Internet Freedom in Africa 2018 Table of Contents 1. Introduction and Background 5 1.1 Introduction 5 1.2 Study Rationale 6 1.3 Aim of the Study 8 2 Study Methodology 9 3 Country Contexts 10 3.1 Political Economy 10 3.2 ICT Status 11 3.3 Political Environment 12 4 Laws and Policies Affecting Privacy and Personal Data Protection 18 4.1 International Framework for the Protection of Privacy 18 4.2 African Instruments on Privacy and Personal Data Protection 19 4.3 National Constitutional Frameworks for the Protection of Privacy 21 4.4 Legal Frameworks for Privacy and Data Protection Laws and Policies 23 4.5 Recognition of Personal Data in Statutes 24 4.6 Limitations on the Right to Privacy 25 5 Results: Status, Trends and Challenges 27 5.1 Limited Understanding of Privacy 27 5.2 Weak Policy and Legal Frameworks 28 5.2.1 Absence of Comprehensive Data Protection Frameworks 28 5.2.2 Abuse of Laws to Undermine Privacy 29 5.2.3 Legal Provisions Compelling Telecom Companies to Cooperate on Surveillance 30 5.2.4 Unreasonable Search and Seizure Provisions 32 5.3 Data Collection Programmes by Governments 33 5.3.1 Mandatory Data Collection 33 5.3.2 Scaling up Digitisation Programmes 36 5.4 Enhanced State Surveillance Capacity 39 5.4.1 Permitted Interception and Surveillance 39 5.4.2 State Acquisition and Deployment of Surveillance Technologies 41 5.4.3 Increased Information Requests from Governments 42 3 Privacy and Data Protection in the Digital Era: Challenges and Trends in Africa State of Internet Freedom in Africa 2018 5.5 Privacy Breaches by Business Entities 44 5.5.1 Legal Responsibility of Business Entities 45 5.5.2 Mishandling of Customer Data 46 5.5.3 Targeted and Indiscriminate Communication 47 5.6 Dispute Resolution and Remedies 48 5.6.1 Existing Frameworks for Remedies 48 5.6.2 Notable Judicial Decisions 49 6 Conclusion and Recommendations 50 6.1 Conclusion 50 6.2 Recommendations 52 6.2.1 Government 52 6.2.2 Companies/Business 53 6.2.3 Academia 53 6.2.4 Media 54 6.2.5 Technical Community 54 6.2.5 Civil Society 54 Privacy and Data Protection in the Digital Era: Challenges and Trends in Africa 4 State of Internet Freedom in Africa 2018 1. Introduction and Background 1.1 Introduction One of the earliest definitions of the right to privacy is from 1890, when Samuel Warren and Louis Brandeis defined it as the “right to be let alone”.1 At the time, the United States was witnessing technological inventions and business methods that were making individuals’ personal lives more accessible to others irrespective of acquaintance, social or economic class, or the customary constraints of propriety.2 These included the telephone, telephone exchanges, portable cameras, instantaneous photographs, sound recording devices, and newspapers. There was therefore need to outline principles to protect the individuals from invasion of their privacy. The concerns expressed by Warren and Brandeis in 1890 are true today perhaps more than before, as the right to privacy is hugely affected by technological developments and by economic, political and social changes . Moreover, privacy concerns continue to feature prominently in democratic processes including elections, commercial transactions, citizen-to-government interactions, and generally in the use of social media.3 National and international efforts to protect personal data from misuse or unlawful access have sought to provide protection against questionable business practices, unlawful surveillance, and digitally mediated attacks perpetuated by adversaries such as hackers and fraudsters. The 1948 Universal Declaration of Human Rights (UDHR) and the 1966 International Covenant on Civil and Political Rights (ICCPR) articulate the right to privacy. The right has also been incorporated in more than 130 national constitutions worldwide.4 The right to privacy is central to the protection of human dignity, forms the basis of any democratic society, and supports other rights, such as freedom of expression, information and association.5 It is essential therefore for states to have policy, administrative and legal frameworks that robustly protect the individual from invasion of their privacy and abuse of their personal data. However, in Africa the weak or missing legal protections for personal data, abuse of existing laws by state agencies in service of often partisan interests, and poor digital security practices by citizens , are tremendously undermining citizens’ privacy and personal data.