All Posts in

July 13, 2018 - Comments Off on DRF and NetBlocks strongly condemn the blocking of Slate Magazine in Pakistan

DRF and NetBlocks strongly condemn the blocking of Slate Magazine in Pakistan

13 July, 2018 -- The Digital Rights Foundation and NetBlocks strongly condemn the blocking of Slate Magazine (www.slate.com) in Pakistan.

“This unprecedented attempt at censorship is not just an attack on free press, but also against the fundamental right to free speech and access to information granted under article 19 and 19-A of the constitution of Pakistan to its citizens,” Hija Kamran, Communications Manager, Digital Rights Foundation, said.

“We demand transparency from the government authorities in their actions and urge them to unblock slate.com in Pakistan immediately while notifying its citizens why the online magazine was blocked in the first place”, she adds.

On 12 July, 2018 inaccessibility to the website was first detected by the NetBlocks internet observatory. An Initial investigation conducted by NetBlocks and Digital Rights Foundation determined that the ban was in effect throughout the country. Subsequent data collected through a controlled study, incorporating 480 sets of measurements over 12 hours via vantage points and providers across the country, indicates a targeted and purposeful disruption consistent with internet filtering techniques.

A chart of measurements from the study shows unavailability of the Slate website on Pakistan’s main providers. During the same period, the site remained accessible internationally.

The organisations informed Slate of the blocking, who then said they were unaware of the incident. In response Slate has cooperated with Digital Rights Foundation by sharing visitor statistics that depict an evident drop in traffic from Pakistan during July 2018.

As we share this statement, we are waiting on receiving an official comment from Slate on the incident.

As Pakistan prepares to hold its general elections in less than two weeks, this action by the authorities is alarming and points to the larger crackdown on dissent and free expression in the country.

There has been no official notification from the Pakistani authorities on the blocking of slate.com even though multiple attempts of accessing the website reflect that it was blocked on the orders of Pakistan Telecommunications Authority (PTA).

“The blocking of an international independent media outlet is a blatant violation to both internet and press freedom”, Hannah Machlin, Global Advocacy Manager, NetBlocks said.

“The fact that this incident occurred in a democratic country in the run up to their general elections, underlines the importance of digital observation. We will continue to closely monitor Pakistan and the rest of the world in order to uncover and verify censorship attempts,” Machlin, added.

The Internet has become a primary source of communication for people across borders. From delivering news to seeking information on new developments, online media has transformed into an essential part of how people exercise their right to information. At times when mainstream media adopts its news from online platforms, it’s important that these media are kept free and open for all to access, without disruption and discrimination. Attempting to censor and restrict critical and independent voices harms Pakistan’s global outlook. We believe that press freedom has increasingly become dependent on digital freedom, and emphasize that it is crucial to keep both mainstream media and online media open for all.

Pakistan has a rich history of censorship since the advent of modern technology. From columns pulled out from newspapers to news channels forced off-air, a comparatively recent three-year ban on YouTube in the country that was lifted in 2016, and multiple websites being blocked in the name of national security or obscenity to social media blackouts and partial and complete network shutdowns - the country is not alien to the concept of technological disruptions. The crackdown on dissent by various forceful attempts is testament to the violation of constitution and universal treaties that Pakistan has signed to protect freedom of speech and press in the country.


Digital Rights Foundation is a registered research based advocacy NGO focusing on ICT to support human rights, democratic processes, and digital governance.

The NetBlocks Group is a civil society group working at the intersection of digital rights, cyber-security and internet governance. Independent and non-partisan, NetBlocks strives for an open and inclusive digital future for all.

July 12, 2018 - Comments Off on June 2018: The Government of Pakistan introduces bill for data protection legislation

June 2018: The Government of Pakistan introduces bill for data protection legislation

DRF Statement: Ministry of IT and Telecom introduces the Personal Data Protection Bill

Photo by Thomas Kvistholt on Unsplash

We commend the efforts of the MoITT to put the preliminary bill of the Personal Data Protection Act for comments. The initial overview of the draft by the DRF team suggests that while the bill is comprehensive in its scope and underscores the importance of data protection and consent of the user before using and/or transmitting their data, we notice that it indeed has some loopholes that have the potential of taking away people’s agency from their information.

DRF submitted a policy brief to the ministry, PDF of which can be found here, and some of our recommendations were made part of this draft. However, we believe that certain sections in the bill should be amended, and DRF is in the process of analysing it in detail to file a submission to the ministry. We hope that the Ministry of Information Technology and Telecommunications will take our recommendations into account in order to address these issues.

Read the full statement here.

Digital misogyny is personal and fixable

Article posted on the website of United Nations Human Rights Office of the High Commissioner

For women and girls, the internet can be empowering but it can also be a dangerous space. Threats, intimidation and extortion attempts are just some of the ways that abuse online takes place. The abuse comes because of what the victim has said, or the group they belong to, the cause they are advocating or in many cases, simply because they are female.

The nature of attacks on women human rights defenders and activists is different, said Nighat Dad, Executive director of the Digital Rights Foundation in Pakistan. During instances of online gender based violence, she had routinely noticed that the attacks against women activists have been personal. Women are criticised for the clothes they wear, how they smoke a cigarette, there are calls for them to be assaulted or raped, Nighat Dad said.

“While not abuse against anyone is less terrible than the other, but when the men are abused, they are abused based on their work. But when a woman is involved, the attacks become personal. Body shaming, character assassination, rape threats, you name it.”

The results of online harassment is stark: women have reported the subsequent psychological harm, including cases of depression, and threats to their safety. These online threats often materialize offline, i.e. online violence can result in offline violence, such as the case in India for Ms Gauri Lankesh a journalist who published criticism of Hindu extremism was killed last year following widespread calls online for violence against her.

Read the article here.

Man convicted under cybercrime law for child pornography

Following in the stead of his predecessor, Judicial Magistrate Aamir Raza Baitu has issued a judgement under section 22 of the Prevention of Electronic Crimes Act (PECA) 2016 [PDF]. This development comes on the heels of another important judgement on online harassment and blackmailing which was reported here and which spoke to the potentially positive impact that the otherwise draconian Act can have if employed within reason.

The defendant in this case was accused by the Cyber Crime Circle of the Federal Investigation Authority (FIA), of possessing, transmitting and producing pornographic pictures and sexually explicit videos by casting children between the ages 10 and 12 in them and then transmitting those pictures and videos to his agent, A , in Norway. The complainants in this case were not the affected children, but the FIA itself, as child pornography is one of the few offences where the FIA can take cognizance. Read details here.

Digital Rights: A Global Action Plan | Global Media Forum

Nighat Dad was at the Global Media Forum happened from June 11-13, 2018 in Bonn, Germany. Nighat's talk titled "Digital Rights: A Global Action Plan" addressed the issues pertaining to digital rights and explored the possible actions required to be taken collectively for a safe and inclusive internet. Nighat said, "While as journalists, human rights defenders and advocates of open access, we can’t bring a revolution in a matter of days, but what we can do is provide support to people and advocate for stronger legislations." Watch Nighat's talk here.

Network of Women Journalists for Digital Rights

Digital Rights Foundation launched its Network of Women Journalists for Digital Rights in 2017 to equip women journalists to counter online violence targeted at them and overcome past experiences that may lead to self-censorship or in extreme conditions, pull themselves away from digital spaces altogether. Online violence is a barrier to women and girls’ access to ICTs and the internet, and their broader human rights, stifling freedoms of expression, association and assembly. To counter this, DRF has created a space for the Network members to regularly share articles and columns on digital rights issues which can be found on the Hamara Internet website here, and to record their voices, particularly relating to digital rights and security issues.

Freedom Network introduces Safety Advisory For Pakistani Journalists Covering #Elections2018

"Freedom Network, Islamabad-based Pakistani media watchdog organisation, releases Safety Advisory to sensitise journalists, photographers, cameramen, media assistants and their organisations on need to take measures to make staffers safe while reporting #Elections2018.

The tips – both in English and Urdu languages – may help minimise risks they may face while reporting these important elections." Details here.

Study reveals extent of Awami Workers political party website block in Pakistan

PAKISTAN – The NetBlocks internet shutdown observatory project in coordination with the Digital Rights Foundation has collected evidence of blocking of a political party website, operated by the Awami Workers Party, in the run up to general elections scheduled on the 25th of July 2018.

The extensive study conducted on Sunday 3 June 2018, spanning 73 autonomous networks and comprising some 10,000 measurements using network digital forensic techniques reveals that the political party’s website has been blocked by most, but not all, Pakistani internet service providers throughout the country. Read the statement by DRF here.

LHC issues notices to PTA chairman, ECP over Facebook’s influence on general election

The petitioner, Shahid Jamal, requested the court to direct the interim federal government, ECP and PTA to press Zuckerberg to take action against fake accounts created on the social media giant before the general election scheduled for July 25. Details here.

Supreme Court of Pakistan suspends tax deduction on mobile cards

LAHORE: The Supreme Court of Pakistan has suspended tax collection on mobile cards and mobile internet in Pakistan.

Chief justice of Pakistan (CJP) Mian Saqib Nisar had taken notice of the high levy charged on mobile phone cards in the country as he asked under which law Rs40 were being deducted from Rs100 mobile cards. Details here.

July 11, 2018 - Comments Off on DRF Statement: Ministry of IT and Telecom introduces the Personal Data Protection Bill

DRF Statement: Ministry of IT and Telecom introduces the Personal Data Protection Bill

Photo by Thomas Kvistholt on Unsplash

Digital Rights Foundation would like to appreciate the Ministry of Information Technology and Telecommunication (MOITT) for drafting a Personal Data Protection Bill and opening it up for consultation among the public. We hope that this is the start of a two-way consultation process where suggestions put forward by civil society groups and citizens are taken into account.

Accessing the internet in a country with little to no focus on digital literacy and no guarantee of data protection is a curious thing. You may expect that what you share online out of your own will is all that anyone knows about you, and that rest of your life remains personal. Right to data protection becomes essential when a person, despite having no understanding of how technological servers work, owns a mobile phone with working telecom network. From his phone number to transmitted data like SMS and call records are being saved somewhere possibly without any security protocols whatsoever - putting the data of that person at risk of being stolen and misused.

While this is not restricted to telecom data, instead, it’s true for all kinds of electronically transmitted information either stored by the person themself or via someone else like that in the case of NADRA database that holds the most sensitive information on over 200 million Pakistanis. A simple internet search lists all the data breaches that NADRA has experienced in the past couple years; a government agency that once held the title of being world’s largest biometric database overlooked the safety of the citizens of Pakistan and allowed for external and internal actors to misuse its data through security loopholes. Digital Rights Foundation recorded some of these breaches in 2017 in an infographic [PDF] in hopes to demand authorities for better security protocols.

This is just one example of citizens data being breached. Whereas it’s important to acknowledge the instances where customer data is being sold for as low as 100 PKR (~ $0.82) by customer care representatives of telecom companies, and through WhatsApp groups. Another rather recent incident was that of a ride-hailing app’s servers being breached and the data of millions of customers was cop. The service chose to remain quiet for months while people continued to use their hacked accounts transmitting more details on the compromised servers. The incident was soon forgotten and no legal measures were taken.

There have been a multitude of instances where customers’ safety was jeopardized and consequences were overlooked. We at the Digital Rights Foundation have recognised and been advocating for the need of a concrete data protection legislation in Pakistan that addresses the issues of security breaches and unwarranted use of their personal information by various organisations and institutions, and grant the protection and power of data to their rightful owners - the users.

It is for this reason, we commend the efforts of the MoITT to put the preliminary bill of the Personal Data Protection Act for comments. The initial overview of the draft by the DRF team suggests that while the bill is comprehensive in its scope and underscores the importance of data protection and consent of the user before using and/or transmitting their data, we notice that it indeed has some loopholes that have the potential of taking away people’s agency from their information. Some of the reservations include vague language being used in the bill, lack of clarity on certain terms including ‘consent’ and ‘public interest’, some sections overlapping and indeed clashing with the Prevention of Electronic Crimes Act 2016 (PECA), and most importantly this bill seems to be giving broad powers to the authorities and data controllers over user data.

DRF submitted a policy brief to the ministry, PDF of which can be found here, and some of our recommendations were made part of this draft. However, we believe that certain sections in the bill should be amended, and DRF is in the process of analysing it in detail to file a submission to the ministry. We hope that the Ministry of Information Technology and Telecommunications will take our recommendations into account in order to address these issues.

Meanwhile, we recommend everyone to review the bill here [PDF]. We would encourage all citizens to send their recommendations to us at info@digitalrightsfoundation.pk with subject line “Recommendations for Personal Data Protection Bill”, or send feedback directly to MoITT to feedback.dpl@moitt.gov.pk.


Statement drafted by Hija Kamran and Shmyla Khan for the Digital Rights Foundation

June 20, 2018 - Comments Off on Man convicted under cybercrime law for child pornography

Man convicted under cybercrime law for child pornography

Following in the stead of his predecessor, Judicial Magistrate Aamir Raza Baitu has issued a judgement under section 22 of the Prevention of Electronic Crimes Act (PECA) 2016 [PDF]. This development comes on the heels of another important judgement on online harassment and blackmailing which was reported here and which spoke to the potentially positive impact that the otherwise draconian Act can have if employed within reason.

The defendant in this case was accused by the Cyber Crime Circle of the Federal Investigation Authority (FIA), of possessing, transmitting and producing pornographic pictures and sexually explicit videos by casting children between the ages 10 and 12 in them and then transmitting those pictures and videos to his agent, A , in Norway. The complainants in this case were not the affected children, but the FIA itself, as child pornography is one of the few offences where the FIA can take cognizance. The report further asserts that the accused committed monetary fraud and received payments through Western Union and MoneyGram for the same.

The timeline of events states that an enquiry dated 14th November, 2016 was initiated upon the receipt of information from a Nordic Police Liaison Officer of the Royal Norwegian Embassy through the Director General FIA which revealed that a Pakistani national was involved in the sexual assault of children who were being physically abused by him and videos and pictures of the same were being sent to an individual, named Jan Lindstrom, in Norway who was also involved in illegal child migration and exploitation. The report also mentioned that the convict along with an accomplice is part of a larger pedophile network, operating online from Pakistan.

The charge against the accused was framed on the 23rd of September, 2017 to which he pleaded not guilty and claimed his right to trial. The prosecution’s evidence was summoned, which had amassed as many as 11 witnesses including a Senior Investigator involved in the raid conducted at the accused’s house and subsequent recovery of digital media. Other witnesses included the forensic expert who worked the case, a Judicial Magistrate and an FC/FIA at the Cyber Crime Circle, Lahore. Channeled the witnesses’ testimonies and financial transactions along with ocular evidence to prove guilt.

The judgement was issued by Judicial Magistrate Baitu on the 26th of April, 2018 where he opined that the court had reached the conclusion that the prosecution had established its case beyond doubt and that the penal provisions of law i.e under s.22 PECA (which is reproduced below) are fully attracted against the accused. In so far as the application  of remaining offences are concerned, the prosecution has failed to establish these offences against the accused.

  1. 22. Child pornography ------- (1) Whoever intentionally produces, offers or makes available, distributes or transmits through an information system or procures for himself or for another person or without lawful justification possesses material in any information system, that visually depicts-----
  • a minor engaged in explicit sexual conduct
  • a person appearing to be a minor engaged in sexually explicit conduct; or
  • realistic images representing a minor engaged in sexually explicit conduct; or
  • discloses the identity of the minor

 

The quantum of punishment administered under the above mentioned section sentences the convict to imprisonment for 7 years and a fine of Rs. 12,00,000/-.

While the fact that convictions are being issued against criminals after putting their case through the judicial process is commendable, certain points must be noted:

In this case in particular, the accused is said to belong to a pornographic ring however no more elaboration on that is provided and neither does the Magistrate appear to make any note of possibly following up on this piece of information. Also, as per a newsclip available on Dawn.com published on the 13th of April, 2017 i.e more than a year before the case was adjudicated upon, the then accused appears to admit to the charges filed against him while answering a question on how much compensation he received per video. This is surprising to see as there is also no allusion made to it in the judgement, no elaboration as to what is being done to tackle it or whether it has other members who are Pakistani nationals and so forth.

Coming to the issue of child endangerment and protection itself, the ambit of our judicial system needs to be increased from just focusing on miscreants and felons on an individual level when  entities like this pornography-producing mafia are on the rise to avoid another incident like the Zainab case. This case received a lot of media attention and thus put pressure on the government and authorities to expedite the justice process however numerous incidents of a similar nature have come to the surface since then that highlight the flaws of our law and order situation, that have received negligible attention and quite possibly, the same amount of expediency as well.

One of the aims of sentencing is for it to serve as a deterrent for the masses, in the spirit of this, a possible option could be to revise the severity of the punishment attached to crimes committed against the dignity and safety of children, in particular.

Another positive step in the direction is the approval of a Cyber Unit by the Interior Ministry to curb child pornography. Speaking to Pakistan Today an official laid out the idea behind the Unit:

‘‘The basic objective of the unit is to curb the menace of paedophilia and the unit will lead a dedicated team of the FIA personnel that will be equipped with the latest software,”

However what is noteworthy is that this announcement came out on the 2nd of February, 2018 and till the time of publication, no further information on the same has surfaced. The need for efficacy and efficiency in this matter cannot be overstated enough and affirmative steps should be taken without any further ado if the aim of these mechanisms and ideas is to protect the children of Pakistan.

Written by Zainab Durrani

June 14, 2018 - Comments Off on May 2018: Online safety of journalists and press freedom are imperative for countries to thrive

May 2018: Online safety of journalists and press freedom are imperative for countries to thrive

World Press Freedom Day 2018

Digital Rights Foundation celebrated World Press Freedom Day on May 3, 2018 alongside journalists and media, and discussed the important issues pertaining to press freedom - both locally and internationally. The conversations revolved around the safety of journalists in the digital world and their right to free speech without being subjected to violence that force them to self-censor, or censorship enforced by internal and external actors. Here are the activities the team of DRF was involved in for #WPFD2018:

  • UNESCO World Press Freedom Day Celebrations in Accra, Ghana

Hija Kamran represented the Digital Rights Foundation at the World Press Freedom Day celebration organised by UNESCO in Accra, Ghana. She was part of some important conversations that discussed journalists’ right to online safety, and their right to freedom to expression.

The panel discussions that Hija was part of included a high level panel hosted by UNESCO titled “Artistic Freedom in the Digital Age” (details on the discussion here) where her intervention addressed how women artists experience online spaces differently than men. Sharing some case studies from Pakistan, she shared that the abuse is mostly directed on a personal level for women, while men experience criticism on their work.

Another session that Hija spoke on was hosted by Access Now and was titled “Internet shutdowns and service restrictions - 'New tools' in restricting the free flow of information?” hosted by Access Now. This session addressed that internet shutdowns, in addition to being the violation of people’s right to freedom of expression, obstruct journalists’ work a great deal. Hija shared the findings of the interviews she conducted with journalists in the light of now two-year long internet shutdown in Federally Administered Tribal Area (FATA), Pakistan where journalists have to travel 20 km to deliver news to their media houses.

  • "Advocacy for Digital Rights" - Training session in Accra, Ghana

Hija Kamran conducted a training session hosted by Media Foundation for West Africa with the partner organisations from around West Africa, in Accra, Ghana. The training titled "Advocacy for Digital Rights" aimed to equip advocates of free expression for journalists in the region to raise issues of digital rights in a manner that is inclusive and effective. By using examples and case studies from South Asia, Hija directed the conversation on rights of the people in digital spaces focusing on building counter narrative especially around internet shutdowns - a frequent problem true to almost all of the world.

  • DRF Campaign on World Press Freedom Day 2018

According to a survey conducted by DRF, nearly 72% of female journalists in Pakistan and 61% of male journalists experience digital insecurity. Through our Network for Journalists for Digital Rights, we ensure empowerment with digital tools and security protocols in order to work more securely and efficiently.
Here’s what our network members shared on World Press Freedom Day:

Anushe Noor: “Being in the media is not considered very feminine - so when a woman decides to take up journalism as a career, she's faced with criticism”.

Umaima Ahmed: "The challenges faced by women in media include discrimination in position, pay and the beats assigned to them as well as emotional and sexual harassment. Today, I press for women’s freedom in media so that they can place an active role in making this world a better place".

Zeenat Shehzadi: "Our culture is restrictive of women entering the media, which leads to a lack of reporting on women-centric issues. We must be provided with safe and secure environment to be able to shed light on the issues that people face".

Afia Salam: "The journalist community in Pakistan needs to take a stand against those who are suppressing their voices because without it people in this society won't be able to seek justice."

Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Digital Rights Foundation headed to Toronto this May to attend RightsCon 2018. At the leading conference on human rights in the digital age, DRF's intensive participation was focused on Freedom of Expression, Data Protection, and Gender. All of these areas are related to human and digital rights, they are all causes that DRF has been working hard for whether through research, on-the-ground assistance, or advocacy. Read more...

Digital rights defenders under threat: Strategies to resist fear, surveillance and (self-) censorship: re:publica 18

Nighat Dad spoke at the panel titled "Digital rights defenders under threat: Strategies to resist fear, surveillance and (self-) censorship" at re:publica18 in Berlin, Germany. The discussion focused on digital attacks against human rights defenders that have expanded dramatically. Vaguely defined anti-terrorism legislation and spyware allow for targeted surveillance; trolls manipulate online content and conduct intimidating smear-campaigns. Against this backdrop of shrinking space and global backlash, holistic strategies for digital rights defenders are crucial. The session presented experiences from human rights activists in the Global South and discussed success stories and lessons learned from digital security and privacy initiatives. Watch the discussion here and details on the panel here.

Responding to Risks and Challenges: Human Rights Frameworks in the Digital Age - HRBDT

Nighat Dad attended the HRBDT Conference - Human Rights in the Digital Age to be part of the panel titled "Responding to Risks and Challenges: Human Rights Frameworks in the Digital Age" happened in Geneva. Nighat highlighted the issues that human rights defenders and advocates for social change face in the global south, and emphasised particularly on issues in the context of Pakistan. She said, "In the absence of strong data protection legislation, human rights defenders are particularly at risk based on their digital footprint, the threat which very quickly transfers into offline consequences. Hence, it's imperative that countries like Pakistan move towards drafting a legislation that grants relief and protection to people and their digital data."

DRF condemns yet another breach of NADRA database and demands strong data protection legislation

There have been a staggering number of instances of mismanagement of personal data that can be traced back to NADRA, the most recent of which is a reported breach into Punjab Information Technology Board (PITB) that has resulted in the loss of a critical amount of confidential data, access to which was granted by NADRA and which is being sold over the internet for as low as Rs.100 (equivalent to almost $1). This hit, which is as recent as May 2018 is yet another forced intrusion into our private lives at the hands of hackers, however the reason our personal data has been so easily plucked is the abysmal state of affairs is our data protection policies, or lack thereof. Full statement here.

Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Dear Twitter,

We heard that you want to do better in making Twitter an inclusive platform. We heard that you have updated your strategy to fight trolls to make it a safe space for everyone. And we also heard that you are committed to fight fake news, especially after what Facebook has gone through in the past couple of months. We, for one, were glad that you are at least trying. But are you?

Digital Rights Foundation writes an open letter to Twitter to address the spread of misinformation on its platform during the General Elections of 2018 in Pakistan. Read the letter here.

Statement: DRF expresses concerns over the ban on the messaging app Telegram in Pakistan

We at the Digital Rights Foundation (DRF) are extremely concerned regarding the ban on the social media messaging application, Telegram, by the Pakistan Telecommunication Authority (PTA). We issued a statement to express our concerns about this ban which curtails the right to communicate in a secure and safe manner. Read the statement here.

TED Global publishes Nighat Dad's talk

Nighat Dad speaks at TEDGlobal 2017 - Builders, Truth Tellers, Catalysts - August 27-30, 2017, Arusha, Tanzania. Photo: Bret Hartman / TED

Nighat is one of the remarkable Pakistanis who, along with her team of phenomenal people, is making Pakistan proud across the world. Nighat’s story is not one of its kind, in fact, it’s a story of every woman - young and old - who was brave enough to mark her existence in the online world; a world that is known to be cruel and yet is believed to be harmless for its virtual nature. Details and video here.

“Online Safe Spaces for Journalists” at University of Management and Technology, May 4th, 2018

DRF held a session at University of Management and Technology with students of Media and Communication. Around 65 students attended the awareness raising session where they were encouraged to keep themselves secure online. In the second half of the session they were given digital security training and were also provided with CDs which included security toolkits and a guidebook on digital security.

Workshop: Right to Play

DRF attended and participated in a day long workshop around women’s participation sports and journalism around sports. Social media was marked as a game-changer for coverage as women sports as great strides have been made without the strictures of traditional media. However female sports journalists talked extensively about online harassment and the toll it can take on their work. The workshop was attended by the top female journalists in Pakistan and some prominent sports personalities.

June 4, 2018 - Comments Off on Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Digital Rights Foundation headed to Toronto this May to attend RightsCon 2018. As the leading conference on human rights in the digital age, DRF was happy to represent Pakistan and explain its context, and present the work that DRF has been doing over the past couple of months.

DRF’s participation in RightsCon can be categorized into three areas: Freedom of Expression; Data Protection; and Gender. All of these areas are related to human and digital rights, they are all causes that DRF has been working hard for whether through research, on-the-ground assistance, or advocacy.

Participation at RightsCon was intensive, with Nighat Dad and Hyra Basit representing the team on a total of 14 sessions, two of which were proposed by DRF, over the course of three days. However, Day 0 was also quite busy - Hyra divided her time between a Protect Our Spaces meeting, called to discuss the sexual harassment that goes on within the tech and human rights circles and what can be done about it, and a meeting on the way Facebook plays a significant role in the politics and operations of a country; Nighat, meanwhile, attended the Executive Directors’ meeting.

DRF has always been vocal about the granted right  to freedom of expression without discrimination between race, gender, class, ethnicity, or religion. Freedom of expression not only includes the freedom to speak and express opinions and thoughts online, but to be able to access online resources without blockades so that a person can then express themselves. The latter especially was discussed during the session ‘Digital Rights for the Persecuted Refugees: Can there be a Global Support Framework?’ moderated by Faheem Hussain. Hyra talked about the struggle to access the internet among the Internally Displaced Persons (IDPs) in Pakistan, refugees from Afghanistan, and also some of the more positive ways that the internet is being and can be used. Nighat as a panelist in the session ‘Eye of the Beholder: Government Attempts to Define and Detect "Extremism" talked about how freedom of expression is curbed because of the constant monitoring and surveillance that is prevalent because the definition of who an extremist or terrorist isn’t clear.

Nighat expanded on the context of Pakistan during the session ‘Free Speech is not Blasphemy’ hosted by Bolo Bhi, talking about the thin line between hate speech and free speech, stressing on how someone’s free speech shouldn’t be used as an excuse to impinge on the rights of others. Continuing the conversation on Day 3, she pointed out the gap in protection offered by privacy policies by the same telecom companies in different countries, as well as the systemic harassment faced by women online which results in many women withdrawing from online spaces during the ‘The Widening Digital Divide’ session arranged by Bolo Bhi. Talking about the nearly two-year internet shutdown in FATA, she suggested strategic litigation using a mix of human stories, violation of human rights and economic cost argument to deal with internet and mobile shutdowns at the session ‘Combatting Shutdowns with COST: A Data Driven Policy Tool for Internet Freedom’. She also addressed the issue of Youth Surveillance as part of a panel hosted by IFEX, especially social surveillance, which affects young girls even more, and while DRF is initiating the discussion on privacy by going to schools and universities, laws that protect children are not adequate for the digital age.

DRF has always stressed on data protection and privacy laws, understanding the intersection between human rights and digitization. As part of our research and advocacy, we looked into the continuous NADRA breaches that have taken place over the years, and all the informed sharing of data by NADRA and government officials without taking the consent, privacy, and safety of Pakistani citizens into consideration. This was also shared during a session “Fingerprint on the pulse: Challenging the lack of privacy protections for biometric data.” hosted by Privacy International. ‘The Global State of Data Protection’ hosted by Access Now was also an opportunity to discuss the right to freedom of information and informational self-determination, and how the GDPR will affect Pakistan.

RightsCon was also an opportunity for DRF to continue its participation in the development of the feminist principles of the internet, as Nighat explained them for the audience and how they applied in Pakistan’s context. We also had the chance to talk about our experience running the Cyber Harassment Helpline and what we’ve learned from our experience in the ‘Take Back the Net: Innovations in Tackling Online Hate and Harassment’ session hosted by PEN America. And while online harassment covers a range of activities, an effort to start a discussion around how the victims of non-consensual pornography can be helped was made through a session hosted by Acoso Online, where the digital security tools and the mental health aspect were discussed.

The ‘Masculinity in Online Spaces’ session hosted by DRF proved to be a thought-provoking session with the panelists speaking out about their experience with men’s behavior online and how the way masculinity exhibits itself has lead to gendered trolling, devaluation of women’s work and severe mental trauma.  The ‘Gendering Surveillance’ panel was also proposed by DRF to discuss the ways in surveillance manifests itself in different contexts, and how it disproportionately affects women and gender minorities.

The four intensive days at RightsCon proved to be packed with insightful discussions, opening us up to new perspectives and giving us the opportunity to present our concerns, criticisms, cultural context. This exchange of ideas opens us up to work towards improving the work that we do in Pakistan.

Written by Hyra Basit

June 3, 2018 - Comments Off on Study reveals extent of Awami Workers political party website block in Pakistan

Study reveals extent of Awami Workers political party website block in Pakistan

PAKISTAN – The NetBlocks internet shutdown observatory project in coordination with the Digital Rights Foundation has collected evidence of blocking of a political party website, operated by the Awami Workers Party, in the run up to general elections scheduled on the 25th of July 2018.

The extensive study conducted on Sunday 3 June 2018, spanning 73 autonomous networks and comprising some 10,000 measurements using network digital forensic techniques reveals that the political party’s website has been blocked by most, but not all, Pakistani internet service providers throughout the country.

Providers implementing the block, which has been criticised on human rights grounds as a violation of the right to free expression and right to political speech during the election period, include national provider PCTL, Wateen and Nayatel.

A further breakdown of the providers identifies which Pakistani ISPs are now restricting their customers from accessing the political party’s website:

Soon

The data provides comprehensive evidence of the extent of the blocking measures that is consistent with internet filters seen in Pakistan and other countries that use internet controls to restrict access to information.

Soon

The measurements were made using the NetBlocks web probes measurement technique, which uses the vantage points of volunteers based inside and outside the country to build a comprehensive view of reachability of online properties. This report will be amended as the situation develops and more details are confirmed.

Commenting on the results of the study, Nighat Dad, founder of the Digital Rights Foundation explained:

“This kind of blocking is a violation of Article 19 of the Pakistan’s constitution and ICCPR which is signed and ratified by Pakistan. We are concerned that blocking of online political content will impact the essence of free and fair elections in Pakistan. We will continue to monitor and catalogue these violations together with our partners at NetBlocks.”

Soon

NetBlocks.org is a global network observatory that monitors Internet shutdowns, network disruptions, and cybersecurity incidents and their relation to elections, geopolitics and international security in real-time.

Digital Rights Foundation (DRF) is a research and advocacy NGO based in Pakistan that focuses on how ICT can support human rights, democratic processes and digital governance. It works towards a world where all people, and especially women, are able to safely exercise their right of expression.

Contact the Digital Rights Foundation: @DigitalRightsPK

Contact the NetBlocks internet measurement project: @netblocks

June 1, 2018 - Comments Off on Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Dear Twitter,

We heard that you want to do better in making Twitter an inclusive platform. We heard that you have updated your strategy to fight trolls to make it a safe space for everyone. And we also heard that you are committed to fight fake news, especially after what Facebook has gone through in the past couple of months. We, for one, were glad that you are at least trying. But are you?

Facebook is taking the heat for allowing user data to be misused during the democratic processes worldwide, but do you think you have done better? We are talking particularly in the context of fake news through fake accounts that Twitter very conveniently allows to exist on its platform. The biased community standards suspend the accounts of women speaking up against trolls in the language they understand, but trolls operating under the shadow of fake accounts keep making use of the platform without facing the consequences of the said standards.

Pakistan is going to have its General Elections in almost 2 months from now, and what we are seeing today is an orchestrated political campaign through fake accounts on Twitter; case in point the convicted rapist of a former Pakistani film actress being appointed in one of the political parties running for the office and later being expelled after an outrage on social media and subsequently on mainstream media. What went wrong here is that during this appointment and expulsion of the rapist, a fake account was setup in the name of the artist who was forced to leave the country after her brutal rape, commending the actions of the political party to expel the rapist. Here’s the screenshot of the tweet, and the link to it in case you actually decide to take action against fake news:

https://twitter.com/JharnaBasak/status/1002246808448495616

You may want to consider the number of reactions on this tweet in a couple of hours, and the impact this misinformation has been making among Pakistanis. The tweet was subsequently picked up by local mainstream media and stories were published and aired within hours.

While this may not seem a big issue by the face of it, but this incident is particularly giving leverage to the political party in consideration, and your platform is the core tool for it. It’s taking away people’s agency to make decisions on their own - overshadowed by misinformation.

Let us reiterate - a political party appointed a convicted rapist and is being celebrated for it because the army of fake accounts on Twitter is pitching for a narrative that will promote this party as being better than others. Would you not agree that it’s against the very principles of democracy that we all advocate for?

Shabnam, the legendary artist who was forced to leave the country after her rape by this influential politician, has been snatched of her agency to voice her concerns during this fiasco. This particular fake account (@JharnaBasak) brought her experience down to a political agenda that only suits the people who benefit from it in current political environment closer to the elections. And not only the political goons are celebrating this incident but also human rights defenders; “Good effort by PTI [Pakistan Tehreek-e-Insaf]”, said one women’s rights activist. Twitter has become a tool that has taken away people’s ability to think rationally. While the convicted rapist shouldn’t have been appointed in the first place, your platform has paved way for people to shrug off the problems that this part of the world has been struggling with for generations - violence against women - and honour the forced measures of rectification under the pretence of awareness.

In such instances, efforts to curb misinformation, abuse and trolling by platforms like Twitter become particularly relevant for them being the primary source of news for people. At this point, we are reminded of a remarkable research by Science Magazine featured in The Atlantic in March 2018 that says, “By every common metric, falsehood consistently dominates the truth on Twitter [...].” It’s evident that the problem has been around since the advent of Twitter, but we ask you, what have you done to improve this, if anything at all?

We want you to actually take action and set the case straight that false information is not welcomed on your platform that is trusted and used by millions across the world.

We recommend,

  1. Setting up a clear editorial policy to counter misinformation, by consulting with all stakeholders
  2. Taking strict actions against fake accounts and false news when it is flagged, and take measures where identical IPs are used to create multiple, possibly fake, accounts
  3. Being transparent about who sponsors the content on Twitter and who benefits from it
  4. Promoting credible voices, especially of women and representatives of marginalised groups, among communities

Pakistan is a fairly new democracy that struggles to keep the reigns of its democratically elected government in place, and has successfully completed the tenure of the second government of the said kind. It wasn't easy, and let us tell you - it was ugly, to say the least. But we did it, and we hope that the next government will do better, because democracy is what we strive for, and democracy is what we want in all the processes that we opt for. And because Twitter holds a strong presence in the country, it remains one of the platforms that influence people's decisions.

We hope that you will do better and give people a chance to make their democratic decisions independent of any influence through misinformation propagated through your platform.

Sincerely,
Concerned members of a democratic country that is Pakistan.

About Digital Rights Foundation: Digital Rights Foundation is a researched based advocacy NGO registered in Pakistan, focusing on ICTs to support human rights, democratic processes and digital governance. For more information, visit www.digitalrightsfoundation.pk or write to us at info@digitalrightsfoundation.pk

Written by Hija Kamran

May 28, 2018 - Comments Off on DRF condemns yet another breach of NADRA database and demands strong data protection legislation

DRF condemns yet another breach of NADRA database and demands strong data protection legislation

The National Database and Registration Authority (NADRA) of Pakistan held the record for being the largest database of citizens’ biometric information the world over, until recently overtaken by India with its Aadhaar card programme. Such stature meant that it enjoys control over a mass amount of information, the kind whose confidentiality is crucial to every person it belongs to, and was duty-bound to protect from prying eyes and predators. Instead, as demonstrated in an infographic available on the Digital Rights Foundation’s (DRF) website, there have been a staggering number of instances of mismanagement of personal data that can be traced back to the Authority, the most recent of which is a reported breach into Punjab Information Technology Board (PITB) that has resulted in the loss of a critical amount of confidential data, access to which was granted by NADRA and which is being sold over the internet for as low as Rs.100 (equivalent to almost $1). This hit, which is as recent as May 2018 is yet another forced intrusion into our private lives at the hands of hackers, however the reason our personal data has been so easily plucked is the abysmal state of affairs is our data protection policies, or lack thereof.

At the time of publication, Pakistan does not have any data privacy legislation enacted. This is a precarious condition given the monumental amount of data that flows through the internet -- through the applications we install and use, and allow our internet service providers (ISPs) and applications themselves to use -- and is stored on the servers. As per a report published by DRF titled ‘Privacy and Data Protection Policies of Telecom Companies in Pakistan’, the measures in place by telecommunication companies to protect our data leaves a lot to be desired and little to no redress is available if any untoward situation arises.

The incident that we are reporting is unfortunately not the first of its kind and is indicative of the fact that cyber security is not a priority of our government institutions, as can be elicited from the following instances;

  • In 2002, NADRA chairman Saleem Ahmed Moeen admitted that about 300,000 NICs that were issued by NADRA carried errors. 
  • In 2011, NADRA employees were accused of preparing fake identification cards for employees of Bahria Town housing authority.

Instances of data sharing, apart from the accounts of unprofessional behaviour by NADRA officials, are also being quoted, for example, the sharing of data with a private company awarded the contract for issuance of National Smart Card Foreigner Identity Pakistan (NICOP) and Pakistan Origin Card (POC) in the UK and Europe. What is worrisome here is just the basic notion of our data being shared with private companies and multiple government departments, as the greater the spread and avenues of access to NADRA’s database, the higher the chances of a leak or misuse of the information.  Also in the news in 2014 was the Coordination Director of Chairman NADRA for leaking out all the messages of the government and strategy of NADRA to PTI and the media. Just these cases in themselves are illustrative enough to show the negligence present across the board at an institution as crucial as NADRA. A top-to-bottom revision of how the Authority operates, its standard operating procedures (SOPs), security and confidentiality-ensuring methods needs to be undertaken.

Further proof of the gravity of the situation is embodied in the recent spate of data breaches that have occurred at NADRA and PITB in the past year. This most recent development occurred in May of 2018, when NADRA handed over access to citizens’ data to the PITB for digitization and has resulted in the aforementioned data being pawned online and on social media platforms for chump change.

As per details available via ProPakistani : ‘… the data breach occurred when NADRA gave access of its servers to Punjab Information Technology Board (PITB), which wanted to digitize citizens’ data by linking CNICs with every other department, including but not limited to education, health, police and land registry.’

Just nine months ago another catastrophe was reported by ProPakistani when PITB’s technical settings allowed for anyone with basic computer navigation skills to access the Computerised National Identity Card (CNIC) numbers, photographic copies of the front and backs of CNI cards and scanned copies of educational degrees amongst other data, on an unregistered scale. It was written off as a technical glitch that was later fixed, however this intrusion into the privacy of civilians brings attention to the vulnerability of national database carriers in protecting sensitive and private information.

According to a source that has worked extensively with NADRA, the official position is that no NADRA database was breached, but that it was in fact the access provided to PITB and its team that resulted in any data leak that may have occurred. They added that NADRA extends its database to banks and telecommunication companies on a need basis, the inference being that no leaks or breaches have occurred on those occasions. The source also expressed concern over the lack of data protection laws in place and when asked if there was any redress available for those civilians whose data had been made public, responded in the negative but pitched that the process of ‘de-identification’ should be introduced wherein on the basis of a breach an individual can request NADRA to de-identify them and allot them a new national identification number and card. It was also highlighted that during the previous general elections, NADRA provided the Election Commission of Pakistan (ECP) with printed voter lists, which complete with CNIC number, name, address and photos was a breach of security of the voters, in itself.

Our data is being accessed by authorised personnel of several government departments, however we have seen that this authority that they have been entrusted with is being misused to sell user data to citizens through WhatsApp and Facebook groups and Twitter accounts. Accountability is a key aim that should be implemented by the government as such worrisome breaches cannot go unnoticed and require a prompt response. Another key aim would be to question is, why access to such sensitive information is provided so nonchalantly where seemingly everyone attached to a certain institution or department can gain access. Special focus should also be fixated on the Punjab Safe Cities Authority (PSCA) and its projects which employ surveillance as one of its methods to be able to improve the law and order situation in Punjab’s biggest cities through the use of technology. The potential for misuse or problematic leaks here is substantial and is only exacerbated by the lack of data protection legislation in the country.  Likewise, access to the data collected by PCSA and security of the servers employed by them is crucial given that it is potentially putting people at risk while they are constantly surveilled. The importance of transparency in these processes cannot be stressed enough given the delicate nature of the whole setup. The public, the people whose very data is at stake here, have a right to know not only how their data is collected, stored and used but also when it is compromised. It is essential that this information be relayed through official channels so that its veracity is not doubted, as much of the information and messages being forwarded on social media platforms cannot be trusted. Ownership must be taken by the state institutions and resultantly, accountability must be demonstrated for the people to see.

The need of the hour, as expressed by DRF time and time again, is to enact a comprehensive and effective data protection law that will serve the purpose of protecting the society’s best interests and one that not only chalks out how to best safeguard our data but also polices the institutions that have access to it.

Author: Zainab Durrani

May 18, 2018 - Comments Off on Nighat Dad makes it to TED Global

Nighat Dad makes it to TED Global

Nighat Dad speaks at TEDGlobal 2017

Nighat Dad speaks at TEDGlobal 2017

“Imagine waking up to a stranger - sometimes multiple strangers - questioning your right to existence for something that you wrote online”, Nighat Dad - a celebrated digital rights activist and lawyer from Pakistan starts her talk at a global stage of TED in August 2017 with an anecdote relatable across borders. The talk can be found here:
https://www.ted.com/talks/nighat_dad_how_pakistani_women_are_taking_the_internet_back#t-29310

Pakistanis are finally being recognised globally for extraordinary work that they have been occupied with for years - the work that was overshadowed by a lot of issues that suppressed the image of this otherwise remarkable country that is full of potential. Nighat is one of those remarkable people who, along with her team of phenomenal people, is making Pakistan proud across the world. With many accolades already in her bag, Nighat shared her story at TEDGlobal in Arusha, Tanzania where she was welcomed by people from various backgrounds who came to listen to her talk, and were in awe when she finished talking.

Nighat’s story is not one of its kind, in fact, it’s a story of every woman - young and old - who was brave enough to mark her existence in the online world; a world that is known to be cruel and yet is believed to be harmless for its virtual nature. Her struggles were just a window to what women have to face everyday, things that are harrowing and can’t be put in words.

Cyber harassment is not a new term anymore. The victim knows it, the harassers know it, the bystanders know it, those who support either party know it. Yet the experiences are questioned, challenged, and ridiculed everyday. Nighat and her team oppose these questions and challenges to support the victims, and this is also when the Digital Rights Foundation was founded out of passion and sheer motive of helping others in the digital realm.

Cyber harassment leads to deadly outcomes and keeps women from accessing the internet, essentially, knowledge - is what Nighat reiterated in her TED talk. While it can be challenged that cyber harassment only affects women, but the fact that women are most vulnerable to online violence can’t be contested. The gendered nature of online abuse was also what kept Nighat from accessing technology because her family imposed restrictions on her that didn’t imply on the male members of her family. The cruel notion of “technology is the root of all evil” is still alive in this part of the world, and is heavily used to restrict women from accessing the pool of knowledge that the internet holds - furthering the oppression that has been going on for centuries. Digital Rights Foundation is challenging this notion, and calling for the harassers to be blamed for their actions, and not the technology. We are advocating for women’s right to access without barriers.

While Pakistan is the home to some remarkable individuals who are known and respected across the world, including Malala Yousafzai, Dr. Abdus Salam, Sharmeen Obaid Chinoy to name a few. But this doesn’t take away the fact that it is also a nation where women are left to die outside their house for answering a phone call, where women are killed in the name of honour for expressing their opinions online, where women are murdered to marry someone they like, because this is how polarised Pakistan is.

Nighat emphasised that because of the strong hold of conservative mindsets in her family, she wasn’t allowed to own a phone until she was married, and even after she got married, this mobile phone became a tool to surveil on her by her ex-husband. She refused to be subjected by the abuse that was projected on her, as a result she was abandoned along with her then-6-month-old son. It could either be the end of all worlds, or it would pave way for her to be the guiding light for many such women who choose to stand up for themselves, or those who have no one to stand by. She chose the latter.

Since then, DRF has been supporting women by providing avenues for them where they can seek help. The laws that grant all citizens right to access the information didn’t extend their legality in the case of women. Why is it that women have to fight for their rights when they were actually born with them? Why is it that the rights that women were born with aren’t given to them by default? Why is it that it’s always men - fathers, brothers, husbands - who choose what rights a woman will be granted, making the laws irrelevant?

The establishment of the Cyber Harassment Helpline - first of its kind in Pakistan and in the region - was done in hopes to extend the fact that women have equal right to access the internet as much as anyone in the society and no one can have the easy way out for making it unsafe for them. By actively lobbying for safe internet access for women, DRF is extending the idea that the internet is not owned by anyone and yet belongs to everyone.

Nighat puts it aptly in her TED talk, “Safe access to the internet is the access to knowledge, and knowledge is freedom.”

Author: Hija Kamran


While you are here...

Because DRF is still a very small organisation, we seek support from our friends and supporters beyond borders. If you’d like to extend your help to our cause, spread the word about our work through your platforms
Or
Reach out to us at info@digitalrightsfoundation.pk.