• The draft Cybercrime Bill would grant authorities expanded investigative powers over electronic data and communications.

• The Institute for Public Policy Research warned that vague provisions could undermine privacy and freedom of expression.

• Nam-CSIRT detected 549,556 cyber vulnerabilities and 843,490 cyber events between April and June 2025.

The Institute for Public Policy Research, a Windhoek-based think tank, said certain provisions of the proposed Cybercrime Bill could infringe fundamental rights. Frederico Links, an associate researcher at the institute, stated that “the legislation must be precise, proportionate and firmly grounded in constitutional protections.”

Lawmakers designed the bill to modernize the legal framework in response to rising cyber threats, including hacking, online fraud, digital scams and attacks on information systems. The draft text grants new investigative powers to authorities, including access to electronic data, analysis of digital communications and seizure of computer equipment during investigations.

While stakeholders recognize the legitimacy of securing digital space, IPPR warned that the breadth of the proposed powers and the absence of clear safeguards could create risks. The organization cautioned that broad interpretations could weaken the right to privacy and freedom of expression. It argued that imprecise definitions could open the door to excessive surveillance or indirect restrictions on journalistic and activist activities.

“Links [Frederico, Ed.] highlighted concerns about broad definitions of offenses, intrusive investigative powers and the importance of clear safeguards to protect privacy and freedom of expression,” IPPR said. The institute added that “the discussion reinforced the need for careful drafting to ensure that cybercrime efforts do not inadvertently undermine fundamental rights.”

The debate surrounding the bill reflects a broader trend across Africa as governments tighten legislation to combat cybercrime amid accelerating digitalization of economies.

Authorities are reviewing the draft against a backdrop of rising cybersecurity incidents in Namibia. The national cybersecurity incident response team, Nam-CSIRT, detected 549,556 cyber vulnerabilities across various sectors between April and June 2025. The team also recorded 843,490 cyber events during the same period, which it defined as unusual activities that could compromise data confidentiality, integrity or availability.

Namibian authorities will need to balance operational effectiveness with respect for constitutional and international human rights standards. As digital transformation accelerates, governance of cyberspace is emerging as a critical test for African democracies.

This article was initially published in French by Adoni Conrad Quenum

Adapted in English by Ange J.A de Berry Quenum