The Media Institute of Southern Africa (MISA) Zimbabwe and other civil society organisations have petitioned the country’s speaker of Parliament over the draft Zimbabwean Cybersecurity and Data Protection Bill.
Read the petition below.
Dear Speaker of Parliament, Hon Advocate Jacob Mudenda,
The undersigned group of civil society organisations who work to promote and defend freedom of expression and information as a fundamental right worldwide are writing to express our concern over the gazetted Zimbabwean Cybersecurity and Data Protection Bill.
While the government has taken a bold step in developing a Bill that establishes a regulatory framework for the ICT sector, the merging of cybersecurity and data protection into a single piece of legislation will make it challenging to strike a strategic balance between security concerns and digital rights. In its current form, the proposed Bill has a number of significant shortcomings that do not meet international standards on protecting privacy and personal data, and, therefore, risk undermining the purpose and scope of the law.
One such issue is the lack of clearly defined circumstances and procedures for the use of forensic tools like key stroke logger, which is being permitted by this legislation and poses a high risk of infringement on the right to privacy. A key stroke logger is an investigative tool or software that permits the user to remotely access data, monitor and record computer activities of another person. Furthermore, the Bill does not provide for judicial oversight or other accountability measures for monitoring and reviewing potential abuses of such intrusive technologies. In addition, we stress that the Bill should place an emphasis on prioritizing less intrusive methods of gathering evidence as a way to avoid the use of excessive investigative methods. This is especially crucial given the lack of specific safeguards to protect whistleblowers, which should also be incorporated to prevent this legislation from being used to target individuals leaking information of public interest.
Whilst the Bill establishes a management framework through the Cybersecurity Centre and Data Protection Authority, the oversight mechanism lacks independence, given that this regulatory role is given to the Postal and Telecommunications Regulatory Authority of Zimbabwe, which would report directly to the Executive. Instead, there is a crucial need for an independent data protection authority that is answerable to parliament, with its appointment processes publicly conducted – as is the case in other jurisdictions and according to best practice. This will serve to minimize the potential for Executive abuse.
Finally, the rights of data subjects should be clearly defined, listed and reinforced. Provisions outlining the handling of individual’s data need to include specific procedures for the timely reporting of security breaches. At the same time, those that allow for the processing of personal data in the name of national security or the public interest must be provided for by law with a clear explanation of what constitutes ‘national security’ and the ‘public interest’. In this regard, other vaguely worded offences related to electronic communications and material have the potential of promoting self-censorship and infringing on free expression and should be struck down or reconstituted to align with international standards and the Constitution.
The country’s internet regulatory framework and digital security laws must be democratic and serve to protect and enable the enjoyment of citizens’ rights to communication, access to information and free expression in a secure environment, both online and offline. A number of international standards and best practices have been developed and endorsed by governments. African regional standards that can be drawn on to inform Zimbabwe’s proposed bill include, the SADC Model Law on Computer Crime and Cybercrime, SADC Model Law on Data Protection, the African Convention on Cybersecurity and Data Protection, and the African Declaration on Internet Rights and Freedoms.
The equal prioritisation and balancing of cybersecurity with data protection, privacy and interrelated fundamental rights is essential, and it is therefore imperative to ensure that the proposed law is unbundled into two standalone laws, in conformity with both the Constitution and international legal frameworks.
Sincerely,
- Africa Freedom of Information Centre (AFIC)
- Association pour le Developpement Integré et la Solidarité Interactive (ADISI-Cameroun)
- Center for Media Studies & Peace Building (CEMESP)
- Collaboration on International ICT Policy for East and Southern Africa (CIPESA)
- Freedom Forum
- Freedom of Expression Institute (FXI)
- Free Media Movement
- Fundamedios – Andean Foundation for Media Observation and Study
- Globe International Center
- Index on Censorship
- International Press Centre (IPC)
- Media Foundation for West Africa (MFWA)
- Media Rights Agenda (MRA)
- OpenMedia
- PEN America
- PEN International
- Privacy International
- Reporters Without Borders (RSF)
- South East Europe Media Organisation
- World Association of Community Radio Broadcasters (AMARC)





Astou Diouf – Senegal – Astou is a lawyer with undergraduate and postgraduate qualifications from Faculté des Sciences Juridiques et Politiques (FSJP), l’Université Cheik Anta DIOP de Dakar, with extensive experience in business litigation, cybercrime, and cybersecurity. She will research the role of internet intermediaries and service providers in the fight against Covid-19 in Senegal, including on issues such as facilitating increased access to the internet, privacy and personal data infringements, and content regulation.
Hopeton S. Dunn, PhD – Botswana – Hopeton is a Professor of Media and Communications at University of Botswana. He is also a non-resident Senior Research Associate at the School of Communication, University of Johannesburg, South Africa. He is the former Director of the Caribbean School of Media and Communication (CARIMAC), University of the West Indies (UWI), Jamaica, where he also headed the Mona ICT Policy Centre (MICT). He is interested in communications policy reform, digital literacy and inclusion, effective internet access and equity, especially as they relate to people in the Global South. His work spans media regulation, technology policy-making, and new theoretical constructs for development.
Afi Edoh – Togo – Togolese technology enthusiast Afi will study digital transformation and the digital economy in Ivory Coast, Ghana, and Togo during the Covid-19 pandemic, to determine value and innovation opportunities as well as challenges. She is a member of the organising committee of the Internet Governance Forum for Youth in West Africa and has also served on the United Nations Internet Governance Multi-Stakeholder Advisory Group (MAG). She holds a Masters and Bachelors in Information Technology from Sikkim Manipal University.
Mohamed Farahat – Egypt – Mohamed is an Egyptian human rights lawyer, specialised in refugees and migration. He is a member of theSteering Committee of Internet Rights and Principles Coalition (IRPC), a member of the Multi-Stakeholder Advisory Group (MAG) of the North Africa Internet Governance Forum, and the National Coordinator of the African Civil Society on Information Society (ACSIS) Egypt chapter. Since 2014, he has worked with the Egyptian Foundation for Refugees Rights (EFRR). He holds a degree in Law from Cairo University, and post-graduate diplomas in International Negotiation; Human Rights and Civil Society; African Studies; and International Law. Currently, he is a Master Degree researcher in the Faculty of African Studies – Cairo University.
Tusi Fokane – South Africa – Tusi, the former Executive Director of the Freedom of Expression Institute (FXI), will study the availability and use of digital technologies to combat the spread of Covid-19 in South Africa, with a focus on the criminalisation of misinformation, and obligations on service providers to remove fake news from their platforms. Furthermore, she will study the country’s readiness for electronic voting to comply with social distancing and other movement restrictions during the upcoming local government elections. Tusi is a co-founder and member of the Steering Committee of Re-Create, a coalition of South African creators who advocate for fair and balanced provisions in the ongoing copyright amendment process. She holds a Masters in Management degree in Public Policy from Wits University. Her particular interests are freedom of expression, technology, and human rights.
Jimmy Kainja – Malawi – Jimmy Kainja is a lecturer in media, communication, and cultural studies at University of Malawi, Chancellor College. His main areas of academic and research interest are communication policy and regulation, journalism, new media, (mis)information and disinformation, freedom of expression, and the intersection between media and democracy. Kainja has been a blogger since 2007 and is a founding member of A
Jean Paul Nkurunziza – Burundi – Jean Paul, a psychology and education sciences graduate of the University of Burundi, has been involved in digital rights policy and internet governance with the DiploFoundation and Internet Society since 2007. In 2010, he was awarded a fellowship at the United Nations Internet Governance Forum Secretariat. His CIPESA fellowship will focus on the political tensions in Burundi, including the recent internet disruption during elections; and ICT sector reforms by the new government, related to cybersecurity, privacy, and data protection.
Dunia Tegegn – Ethiopia – Dunia is a legal consultant, who has previously worked as an Almami Cyllah Fellow with Amnesty International (United States) and as a Human Rights Officer at the East Africa Regional Office of the UN High Commissioner for Human Rights. Dunia also worked as a Program Officer on Ending Violence against Women and Girls at UN Women Ethiopia, and on child protection issues with UNICEF Ethiopia. She holds a Master of Laws in National Security from Georgetown University Law Center and a Master of Arts in Human Rights from Addis Ababa University. Dunia is the first Africa Fellow for Georgetown’s LAWA program to earn a Master of Laws in National Security. She earned her bachelor degree in law from Bahir Dar University, Ethiopia. Dunia is a member of the Pan African Lawyers Union (PALU), the Ethiopian Bar Association, and the Ethiopian American Bar Association.
Melissa Zisengwe – South Africa – Melissa is a Program Project Officer with the Civic Tech Innovation Network at Wits Governance School, based in South Africa. She holds an honours degree in Journalism and Media Studies and a Bachelor of Arts in English Language and Linguistics and Journalism and Media Studies from Rhodes University. Her work at the Civic Tech Innovation Network and Jamlab (also at Wits) focuses on digital innovation in Africa, including digital journalism and media, and promoting the growth and development of appropriate and effective uses of digital technologies in connecting government and citizens, in public participation, in transparency and accountability, and in delivering public services. In 2019 she was part of the Index on Censorship Youth Advisory Board – a project by Index on Censorship aimed at engaging with young people aged 16-25 from around the world and gathering their views on freedom of expression issues.