Clicky
  • home Home
  • keyboard_arrow_right NEWS
  • keyboard_arrow_right Posts
  • keyboard_arrow_rightThe South African government’s thinking on surveillance law is regressive

The South African government’s thinking on surveillance law is regressive

By: Jane Duncan, University of Johannesburg

The constitutionality of South Africa’s surveillance law is being challenged in court.
shutterstock

 

A case before the High Court in Pretoria, South Africa’s capital city, is set to have important implications for citizens’ privacy – and the ability of journalists to do their work without hindrance.

At the heart of the problem is the country’s main communication surveillance law, the Regulation of Interception of Communications Act (Rica).

Rica was promulgated shortly after the September 11 terror attacks in the US in 2001. It prohibits people’s communications, such as their phone calls, from being intercepted without their consent, except under certain conditions. But it can be abused by rogue elements in intelligence. They argue that it does not sufficiently protect the personal communications of private citizens, politicians and journalists.

The amaBhungane Centre for Investigative Journalism and its founding partner, journalist Sam Sole, are challenging the constitutionality of sections of Rica. They’re doing so on the basis that it does not sufficiently protect freedom of expression and privacy rights. This is because it allows the state to spy on people’s communications with inadequate safeguards to prevent abuse.

Rica in perspective: good and bad

One strength of the Rica law is that it requires a judge to authorise the communication interception directions (or warrants). These directions are also limited to serious crimes. Neighbouring Zimbabwe, by contrast, has executive authorisation – so a government official can make this decision.

However, this strength in Rica is undermined by the fact that decisions to grant interception directions are taken by only one retired judge who is working alone without having the benefit of an adversarial process. The process is inherently one-sided: the judge has to rely on information provided by the spy agencies, and has been lied to in the past. This problem could be solved by having a panel of judges, and a public advocate interrogating the applications put before the judge.

On a positive note, interception directions are limited to a duration of up to three months at a time and must be in writing. However, the standard for authorisations is weak. These agencies merely need to satisfy the judge that there are reasonable grounds to believe a crime has been, is being or will probably be committed. This vague formulation can lead to them engaging in speculative investigations – including to uncover journalist’s confidential sources.

The amaBhungane case was triggered by a disclosure that Sole’s communications with a senior prosecutor were intercepted.

Government’s position

The respondents in the case include the Ministry of Justice and Constitutional Development (the executive authority responsible for Rica), the Ministry of State Security (responsible for managing the interception centres) and the South African Police Service, which is Rica’s heaviest user.

The government is fighting back with deeply disappointing arguments that should be reconsidered. Their actions fly in the face of recent attempts to curb abuses of state spying and policing. The state’s action is redolent of the securocratic era of former President Jacob Zuma.

The Justice Ministry claims that no rights have been breached by Rica. Yet it concedes that Rica needs to be reformed. In fact, it has even launched a policy review of Rica. So, Rica is fine – but it also isn’t.

Given that it is meant to provide policy leadership on justice matters, the Ministry’s responses are a particularly depressing read. They are regressive, contradictory, and at times incoherent.

The Ministry has criticised amaBhungane for preempting a policy review on Rica, and for handing parts of this review over to the courts for adjudication. It has also argued that the courts should defer to the executive on these matters.

The State Security Ministry echoes this view, arguing that

…it is not the role of Court to decide matters that involve the balancing of complex factors and sensitive subject matter relating to national security and intelligence services.

However, had the government not sat on its hands and delayed relevant policy reforms (in the case of State Security, for a decade, the amaBhungane application may not be necessary because Rica’s constitutional deficiencies could well have been cured.

Judicial oversight

Independent judicial oversight is one of the most crucial elements of effective intelligence oversight. Yet, spy agencies can resist judicial scrutiny by waving the national security wand. They have succeeded most prominently in the US, where the Supreme Court has a long track record of judicial deference on national security matters. They must not be allowed to succeed in South Africa.

The Justice Ministry has argued that technological advances have necessitated the review of Rica. But it is making too much of technological advances, and not enough of the rights issues. It is not possible or even desirable to try and legislate for all advances. Rather the law should deal with principles.

In that regard, Rica should state that the more invasive of privacy the interception capability is, the higher the standard for the issuing of warrants and the more robust the oversight.

For instance, intercept information obtained through hacking – which is extremely invasive as it alters the device that is hacked – should not, as a general rule, be admissible as evidence in court. If it is, expert evidence must be admitted on whether the information has been compromised by the manner of interception.

Troubling inferences

Possibly the most important reform to Rica that amaBhungane is seeking is user notification: if a person’s communication has been intercepted, they should be informed once investigations reach a non-sensitive stage. User notification could be a powerful deterrent against abuse; affected parties could challenge the directions after the fact if they were issued with no clear basis.

But if the police are to be believed, and in a perhaps unintended critique of their own investigative processes, their investigations are unlikely to reach a non-sensitive stage, ever.

If the kind of government thinking evident in the amaBhungane case is allowed to persist under President Cyril Ramaphosa, then efforts to reform surveillance, policing and intelligence will be in trouble.

Jane Duncan is the author of “Stopping the Spies: Constructing and Resisting the Surveillance State in South Africa” (Wits University Press, 2018).The Conversation

Jane Duncan, Professor and head of the Department of Journalism, Film and Television, University of Johannesburg

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Written by: Natasha



UpComing Shows

DownLoad Our Mobile App

Privacy Policy

THIS PRIVACY STATEMENT FORMS PART OF KAYA 959’S TERMS OF USE POLICY. IF YOU DO NOT AGREE WITH ANY TERM OF THIS PRIVACY STATEMENT, YOU MUST CEASE YOUR ACCESS OF THIS WEBSITE IMMEDIATELY. 

POPIA ActTo promote the protection of personal information processed by public and private bodies; to introduce certain conditions so as to establish minimum requirements for the processing of personal information; to provide for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000; to provide for the issuing of codes of conduct; to provide for the rights of persons regarding unsolicited electronic communications and automated decision making; to regulate the flow of personal information across the borders of the Republic; and to provide for matters connected therewith.

RECOGNISING THAT—

  • section 14 of the Constitution of the Republic of South Africa, 1996, provides that everyone has the right to privacy;
  • the right to privacy includes a right to protection against the unlawful collection, retention, dissemination and use of personal information;
  • the State must respect, protect, promote and fulfil the rights in the Bill of Rights;

AND BEARING IN MIND THAT—

  • consonant with the constitutional values of democracy and openness, the need for economic and social progress, within the framework of the information society, requires the removal of unnecessary impediments to the free flow of information, including personal information;

AND IN ORDER TO—

  • regulate, in harmony with international standards, the processing of personal information by public and private bodies in a manner that gives effect to the right to privacy subject to justifiable limitations that are aimed at protecting other rights and important interests,
  1. Definitions and Interpretation

1.1.“Personal Information” means information relating to an identifiable, living, natural person and where it is applicable, identifiable, existing juristic person, including all information as defined in the Protection of Personal Information Act 4 of 2013. 

1.2  Parliament assented to POPIA on 19 November 2013. The commencement date of section 1Part A of Chapter 5section 112 and section 113 was 11 April 2014. The commencement date of the other sections was 1 July 2020 (with the exception of section 110 and 114(4). The President of South Africa has proclaimed the POPI commencement date to be 1 July 2020.

 
1.3. “Processing” means the creation, generation, communication, storage, destruction of personal information as more fully defined in the Protection of Personal Information Act 4 of 2013.  

1.4. “You” or the “user” means any person who accesses and browses this website for any purpose. 

1.4. “Website” means the website of the KAYA 959 at URL www.kaya959.co.za or such other URL as KAYA 959 may choose from time to time.   

  1. Status and Amendments

2.1. KAYA 959 respects your privacy. This privacy policy statement sets out KAYA 959’s information gathering and dissemination practices in respect of the Website. 

2.2. This Privacy Policy governs the processing of personal information provided to KAYA 959 through your use of the Website. 

2.3. Please note that, due to legal and other developments, KAYA 959 may amend these terms and conditions from time to time.  

  1. Processing of Personal Information

3.1. By providing your personal information to KAYA 959 you acknowledge that it has been collected directly from you and consent to its processing by KAYA 959. 

3.2. Where you submit Personal Information (such as name, address, telephone number and email address) via the website (e.g. through completing any online form) the following principles are observed in the processing of that information: 

3.2.1. KAYA 959 will only collect personal information for a purpose consistent with the purpose for which it is required. The specific purpose for which information is 
collected will be apparent from the context in which it is requested. 

3.2.2. KAYA 959 will only process personal information in a manner that is adequate, relevant and not excessive in the context of the purpose for which it is processed. 

3.2.3. Personal information will only be processed for a purpose compatible with that for which it was collected, unless you have agreed to an alternative purpose in writing or KAYA 959 is permitted in terms of national legislation of general application dealing primarily with the protection of personal information. 

3.2.4. KAYA 959 will keep records of all personal Information collected and the specific purpose for which it was collected for a period of 1 (one) year from the date on which it was last used. 

3.2.5. KAYA 959 will not disclose any personal information relating to you to any third party unless your prior written agreement is obtained or KAYA 959 is required to do so by law. 

3.2.6. If personal information is released with your consent KAYA 959 will retain a record of the information released, the third party to which it was released, the reason for the release and the date of release, for a period of 1 (one) year from the date on which it was last used. 

3.2.7. KAYA 959 will destroy or delete any personal information that is no longer needed by KAYA 959 for the purpose it was initially collected, or subsequently processed. 

3.3. Note that, as permitted by the Electronic Communications and Transactions Act 25 of 2002, KAYA 959 may use personal information collected to compile profiles for statistical purposes. No information contained in the profiles or statistics will be able to be linked to any specific user.    

  1. Collection of anonymous data

4.1. KAYA 959 may use standard technology to collect information about the use of this website. This technology is not able to identify individual users but simply allows KAYA 959 to collect statistics. 

4.2. KAYA 959 may utilise temporary or session cookies to keep track of users’ browsing habits. A cookie is a small file that is placed on your hard drive in order to keep a record of your interaction with this website and facilitate user convenience. 

4.2.1. Cookies by themselves will not be used to identify users personally but may be used to compile identified statistics relating to use of services offered or to provide KAYA 959 with feedback on the performance of this website. 

4.2.2. The following classes of information may be collected in respect of users who have enabled cookies: 

4.2.2.1. The browser software used; 

4.2.2.2. IP address; 

4.2.2.3. Date and time of activities while visiting the website; 

4.2.2.4. URLs of internal pages visited; and 

4.2.2.5. referrers. 

4.3. If you do not wish cookies to be employed to customize your interaction with this website it is possible to alter the manner in which your browser handles cookies. Please note that, if this is done, certain services on this website may not be available. 

  1. Security

5.1. KAYA 959 takes reasonable measures to ensure the security and integrity of information submitted to or collected by this website, but cannot under any circumstances be held liable for any loss or other damage sustained by you as a result of unlawful access to or dissemination of any personal information by a third party. 

  1. Links to other websites

6.1. KAYA 959 has no control over and accepts no responsibility for the privacy practices of any third party websites to which hyperlinks may have been provided and KAYA 959 strongly recommends that you review the privacy policy of any website you visit before using it further. 

  1. Queries

7.1. If you have any queries about this privacy policy please contact us by emailing [email protected]