PSA 2024 Call for Papers
In May 2024, the Privacy Symposium Africa launched its call for papers, inviting researchers to submit original studies under the theme “Bridging Policy, Technology, and Societal Dynamics.”
Researchers from across Africa responded enthusiastically, contributing works that addressed pressing concerns in the digital landscape.
On November 21, 2024, the symposium showcased the top three research papers. Read on for more details.
The best 3 original research papers as presented at the 2024 Edition of the Privacy Symposium Africa in Harare, Zimbabwe.
POSITION
PAPER TITLE
1
DIGITAL BANKING AND PRIVACY IN ZIMBABWE: INVESTIGATING THE PRIVACY IMPLICATIONS OF DIGITAL BANKING SERVICES - A paper by MELISSA CHASI
This paper examines the implications of the Cyber and Data Protection Act (CDPA) of Zimbabwe, which took effect in 2021, on the operations of banks and mobile money providers. The CDPA aims to regulate the processing of personal data by data controllers, including financial institutions, thereby promoting the lawful use of technology. With the definition of mobile banking outlined in the Banking Act, this study highlights the increasing importance of data protection in an era where banking technology is rapidly evolving through mobile applications. While Zimbabwean banks have shown notable compliance with data protection standards, bolstered by the Reserve Bank of Zimbabwe’s stringent requirements and alignment with international regulations such as the General Data Protection Regulation (GDPR), there remains a cultural gap in understanding privacy rights among employees and the general public. Given the rising incidents of data breaches, the CDPA serves as a crucial framework for guiding banks in their obligations to both data subjects and the Data Protection Authority. Ultimately, the paper explores how the CDPA influences the handling, processing, and safeguarding of personal data in the digital services landscape provided by banks and mobile money operators in Zimbabwe.
2
BEYOND THE LOAN: ANALYSING THE PRIVACY IMPLICATIONS OF THE PRACTICES OF DIGITAL LOAN APPS IN UGANDA - A paper by MARTIN KITYO
The days of waiting in long bank queues for assessments on eligibility for loans are behind us. Digital loan apps are gaining significant traction in Uganda as they offer a convenient alternative to traditional banks for individuals who need quick loans without the need for collateral security or extensive formalities. However, this convenience comes at a hidden cost.
Using a doctrinal analysis, this paper explores what lies behind the convenience by examining the implications of the practices of digital loan apps in customer acquisition, risk assessment, and management on privacy rights of individuals in Uganda. The findings reveal key concerns including; non-registration, obtaining user consent without providing adequate information and excessive data collection. There are also challenges of automated decision-making processes, user profiling, restricted data correction rights, lack of transparency, and infringement of third-party privacy rights of persons during debt recovery.
This paper highlights the lack of compliance by digital loan service providers despite the protective framework provided by the 1995 Constitution of the Republic of Uganda (as amended), the Data Protection and Privacy Act Cap 97, and related legislation such as the Digital Lending Guidelines 2024, and the Tier 4 Microfinance Institutions and Money Lenders Act Cap 61. The paper concludes by recommending continued adherence to the law by digital lenders and more targeted enforcement by regulatory bodies such as the Personal Data Protection Office. It advocates for translating privacy policies into local languages and simplifying them, better public awareness, and stricter oversight mechanisms to protect user privacy while supporting innovation in the digital financial sector. These measures are essential to striking a balance between financial inclusion and safeguarding the fundamental right to privacy in Uganda.
3
CONCERN WITHOUT CONSENSUS: ADDRESSING THE DIGITAL DIVIDE IN LEGISLATION FOR PRIVACY AND DATA PROTECTION IN AFRICA - A paper by FELIX ONAN-OLINDI
As the Fourth Industrial Revolution (4IR) reshapes global economies, the swift integration of technologies such as Artificial Intelligence (AI), data analytics, and the Internet of Things presents significant challenges for lawmakers, particularly in Africa. The widespread digital divide complicates legislative efforts to establish effective frameworks for privacy, data protection, and digital rights. While these emerging technologies herald substantial opportunities, the disparity in digital access risks amplifying existing inequalities across the continent.
This paper critically examines the complexities of legislation in a landscape where not all citizens share in the benefits of the 4IR. It advocates for the development of inclusive and adaptive privacy and data protection laws that address the needs of all citizens. Furthermore, it proposes a comprehensive framework tailored for African lawmakers, aimed at creating legislative solutions that are both protective and inclusive, accounting for the continent’s distinct socio-economic challenges.
