"This report finds that significant, deliberate, and centrally coordinated internet disruptions occurred before, during, and after Uganda’s January 2026 general elections. Contrary to public assurances issued by government officials in the weeks preceding polling, access to the internet was progre ... ssively restricted through a series of pre-emptive regulatory actions, followed by a nationwide public internet shutdown beginning on 13 January 2026, partial restoration with continued platform-level blocking, and full restoration only on 26 January 2026. The evidence demonstrates that these disruptions were not accidental, congestion-related, or isolated technical failures, but a systematic strategy of digital control implemented at a critical democratic moment. The shutdown replicated and expanded upon patterns observed during Uganda’s 2016 and 2021 elections, while introducing new features, including the pre-emptive elimination of alternative connectivity options and intensified deterrent messaging around surveillance and circumvention tools. [...] The findings of this report demonstrate that, during elections, internet access in Uganda has become politically contingent rather than protected as an essential component of democratic infrastructure. Without sustained accountability and structural reform beyond the election cycle, future elections risk being conducted under conditions that systematically constrain participation, scrutiny, and trust. This report therefore calls on national institutions, courts, regulators, private actors, and international partners to treat election-period internet shutdowns not as technical anomalies, but as serious democratic violations that require durable remedies." (Executive summary, pages 8-10) more

"The evolving digital landscape across East Africa and beyond underscores the critical need for robust data protection and privacy frameworks. While countries like Kenya, Rwanda, Tanzania, Mauritius, and Zimbabwe have made significant progress in establishing legal and institutional mechanisms to sa ... feguard personal data, challenges remain in enforcement, compliance, and public awareness. Kenya, despite being a leader in the region’s digital economy, continues to grapple with regulatory gaps, non-compliance, and weak enforcement of its Data Protection Act. The rise of emerging technologies such as Artificial Intelligence (AI), blockchain, and the Internet of Things (IoT) necessitates stronger regulatory oversight, aligning with international best practices, including the GDPR and the African Union Convention on Cyber Security and Personal Data Protection. For Rwanda, ethical data governance is paramount in its rapidly digitalizing economy. Ensuring that privacy, dignity, and autonomy are upheld requires the active participation of government, the private sector, civil society, and citizens. This report has evaluated Rwanda’s Data Privacy and Protection Law, identifying both strengths and areas for improvement, particularly in compliance and enforcement across different sectors. Tanzania has demonstrated a commitment to data privacy through its Personal Data Protection and Privacy Act, but challenges in its legal and institutional frameworks hinder full implementation. Strengthening these frameworks by incorporating international legal obligations, particularly through the Malabo Convention, would enhance Tanzania’s data protection regime. Mauritius has taken commendable steps in aligning its Data Protection Act (DPA) 2017 with international standards, but translating this framework into effective protections remains a challenge. Inconsistencies in data collection, lack of transparency, and insufficient public awareness have impeded progress. To address these gaps, Mauritius must focus on legislative refinements, institutional strengthening, enforcement mechanisms, and public education. A comprehensive data breach response framework and active engagement in global data protection forums would further solidify its position as a regional leader in data protection. Zimbabwe’s Data Protection Act, though relatively new, has introduced significant measures to protect data subjects. There is an increasing recognition of data privacy rights across various sectors, with businesses and government agencies adopting privacy policies. However, challenges persist, including the lack of transparency reports and weak internal data breach resolution mechanisms. Strengthening compliance frameworks and promoting greater accountability are essential to fostering a more secure digital ecosystem. As digital economies continue to expand, cross-stakeholder collaboration is essential to ensuring that data protection is not just a legal requirement but a practical reality. Governments must strengthen regulatory oversight, businesses must prioritize compliance and transparency, and civil society must demand accountability and advocate for user rights. The protection of personal data is not just a legal obligation but a fundamental human right. Countries in the region have the opportunity to enhance digital trust, drive innovation, and foster economic growth by continuously refining their data protection laws and enforcement mechanisms. Moving forward, sustained efforts in policy development, international cooperation, and public engagement will be crucial in shaping a secure and privacy-conscious digital future." (Conclusion) more

"Notably, effective media coverage of the general elections in Uganda was curtailed by the internet shutdown as pointed out by 80% of the respondents. On the whole, the shutdown had negative impact on both the quality and quantity of the news output. For example, Mobile money services were interrupt ... ed, so the means to facilitate journalists with fares, lunch, wages were equally curtailed which impacted greatly on the quality and timeliness of news and information. Other specific impacts included: it made it harder to effectively communicate the news in full; affected timely delivery of the news as they sought other ways that were slower than using the internet channel; made it complicated to research and reference other news items; they’re not able to share and fully document information; access to news was affected because of the delayed delivery." (Executive summary) more