Online Privacy & Digital Threats for Human Rights Defenders in Uganda

By Noelyn Tracy Nassuuna

In Uganda, where human rights defenders (HRDs) face challenges such as government repression, cyberattacks, and surveillance, online privacy has become an increasingly pressing concern. As HRDs utilize digital platforms to organize, raise awareness, and advocate for change, they find themselves targets of various digital threats. With restrictive laws like the Cybercrimes Act and other emerging regulations, HRDs must take measures to protect their personal and professional privacy online to ensure their safety and safeguard their advocacy.

Uganda’s digital landscape presents a complex environment for HRDs. In recent years, the government has enacted a range of laws to curb freedom of expression online, increase surveillance, and restrict digital privacy. These laws present significant threats to HRDs, especially those critical of the government or involved in sensitive advocacy work. Let’s examine the Cybercrimes Act and other legal frameworks affecting online privacy for HRDs in Uganda.

1. The Cybercrimes Act?The?Cybercrimes Act?of 2011, wassed to address the growing concern oaboutcybercrimes in Uganda, poses significant challenges to HRDs and their digital security. While it aims to combat crimes like hacking, online fraud, and child pornography, it also grants bthe government broad powersto monitor and control online activities. Some of the provisions of the Act allow for the surveillance of online communications, leading to concerns about privacy violations.

• Section 25?of the Act allows the government to demand access to any digital device or data io investigate crimes. HThus, RDs, activists, and journalists may be at risk of having their private communications and data forcibly accessed under the pretext of investigation.
• Section 24 makes it a crime to “send offensive, obscene, or false” messages, leaving HRDs vulnerable to prosecution if their online activities or opinions are deemed critical of the government. This provision has been used as a tool to silence dissent and stifle freedom of expression online.
• The Cybercrimes Act also facilitates the blocking of websites or online content that the government deems “harmful,” which can hinder HRDs’ ability to reach a global audience or share important information about human rights violations.

The broad and vague language in the Act creates a chilling effect, making HRDs cautious about what they say or share online for fear of prosecution or retaliation.

2. The Computer Misuse Act In addition to the Cybercrimes Act, the Computer Misuse Act of 2011 has also raised concerns regarding online freedom and privacy. The law targets cybercrimes such as identity theft, cyberstalking, and the sharing of offensive content online. While it aims to protect citizens from online harm, its provisions have been used against HRDs.

• Section 24 criminalizes the publication of content deemed “false” or “threatening,” with penalties that include imprisonment. This provision is often used to target HRDs who speak out against government corruption, human rights abuses, or political repression.
• Furthermore, the law gives authorities the power to shut down or block websites and social media accounts, making it difficult for HRDs to communicate and organize online without fear of being targeted or silenced.

3. The Data Protection and Privacy Act Uganda’s Data Protection and Privacy Act of 2019 was introduced to protect citizens’ personal data and regulate how companies collect, process, and store information. While the Act aims to enhance privacy protections, its enforcement is still developing, and there are concerns about how it could be used to target HRDs.

• Although the law mandates organizations safeguard personal data, it does not guarantee the privacy of HRDs when the state targets them. It is unclear whether the government’s data collection activities, especially surveillance of HRDs, align with privacy protection standards.
• The Data Protection and Privacy Act also requires individuals to protect their data, which can be challenging for HRDs in Uganda, who may lack the resources or technical knowledge to fully safeguard their digital footprint.

4. Proposed Legislation: Social Media Regulations In addition to existing laws, Uganda has seen proposals for social media regulations in recent years. One such bill, the Social Media Bill, was tabled to regulate online content and social media platforms. Although not yet passed, the bill proposes stringent measures that could affect the work of HRDs.

• The proposed bill aims to criminalize “false” and “hateful” content online and could be used to stifle free speech and limit HRDs’ ability to share information and engage with the public.
• If enacted, such legislation would empower the government to take down social media accounts and block access to platforms used by HRDs to communicate freely. This could limit their ability to advocate for human rights and organize online.

Digital Security Measures for HRDs in Uganda Despite the legal landscape and digital threats, HRDs in Uganda can take proactive steps to protect their online privacy and security. Below are some essential measures for HRDs:

1. Use Strong Passwords and Two-Factor Authentication (2FA): HRDs should use unique, complex passwords and enable two-factor authentication to prevent unauthorized access to accounts.
2. Secure Communication Channels: Encrypted messaging apps like Signal or Telegram are safer alternatives for sensitive conversations. Avoid using insecure platforms like regular email or social media messaging apps.
3. Regular Software Updates: HRDs should keep their devices and apps up-to-date to patch security vulnerabilities that may be exploited by attackers.
4. VPNs and Encrypted Browsing: HRDs should use Virtual Private Networks (VPNs) to protect their online activities and avoid using public Wi-Fi for sensitive tasks.
5. Practice Digital Hygiene: Regularly clear browser history, disable tracking features, and avoid sharing personal information that could compromise safety.
6. Back Up and Encrypt Data: Sensitive data should be backed up and encrypted, ensuring that HRDs can maintain access to their work in case of device theft or hacking.

The online privacy and security of HRDs in Uganda are under constant threat due to restrictive laws and increasing surveillance. While laws such as the Cybercrimes Act, Computer Misuse Act, and others aim to regulate digital activities, they also create a difficult environment for HRDs to operate freely online. To continue advocating for human rights and defending justice, HRDs must prioritize digital security, stay vigilant, and use tools that safeguard their online presence.

At Defenders Protection Initiative (DPI), we understand the critical role that digital security plays in the work of HRDs in Uganda. To address these challenges, DPI has been actively involved in providing training, support, and resources for HRDs to ensure their safety in the digital space.

• Digital Security Clinics and Training: DPI conducts regular digital security clinics and training sessions tailored for HRDs, where we educate individuals and organizations on best practices for online safety. These clinics cover a wide range of topics, including securing communications, protecting personal data, and countering cyberattacks.
• Emergency Support: For HRDs who are directly targeted by online harassment, surveillance, or cyberattacks, DPI provides immediate support, including advice on incident response, recovery, and mitigation.
• Collaboration and Advocacy: DPI works closely with other civil society organizations, international bodies, and legal experts to advocate for stronger protections for HRDs, both online and offline. We also collaborate with international cybersecurity experts to keep HRDs updated on the latest digital threats and countermeasures.
• Safe Spaces for Digital Dialogue: We have also been organizing events such as regional Kyotos to create safe spaces for HRDs to discuss the challenges they face and explore solutions together. These events help foster a sense of community and shared responsibility when it comes to protecting HRDs' digital security.

In these efforts, DPI aims to empower HRDs to continue their critical work without fear of digital threats, ensuring that their right to freedom of expression, privacy, and safety is upheld. We remain committed to supporting HRDs and amplifying their voices in the face of increasing digital repression.

As digital threats grow, HRDs must take the necessary precautions to ensure their safety while continuing their essential work in the face of adversity. By practicing strong cybersecurity and staying informed about the legal landscape, HRDs in Uganda can continue their vital work without fear of digital repression.