Zambia’s Cyber Laws: Safety or Surveillance?

Zambia’s recently enacted Cyber Security and Cyber Crimes Act, 2025, has ignited a fervent debate across the nation and among international observers. While proponents champion the legislation as a vital tool to combat escalating cybercrime and bolster national security, critics voice grave concerns that it simultaneously opens the door to widespread surveillance and poses a significant threat to civil liberties.

Signed into law in April 2025 by President Hakainde Hichilema, the complete legal framework aims to tackle a range of digital threats, from online fraud and identity theft to cyber terrorism. It establishes the Zambia Cyber Security Agency and introduces stiff penalties, including lengthy prison sentences, for various cyber offenses. The government maintains that these measures are crucial to safeguarding citizens in an increasingly digital world and protecting critical national infrastructure.

However, the laws’ broad provisions concerning the interception and monitoring of electronic communications have drawn the most fire. The Act grants authorities the power to monitor calls, emails, messages, and streamed content, in some cases with a court-issued warrant, and, alarmingly, in certain circumstances without one if delays could cause harm. Civil society organizations and digital rights advocates, including the Global Network Initiative and MISA Zambia, argue that such expansive powers, coupled with vague definitions of “false information” or content causing “emotional distress,” create a chilling effect on freedom of expression and could be easily misused to suppress dissenting voices.

The relocation of the Zambia Cyber Security Agency under the direct control of the President’s office further fuels fears of political interference and a lack of independent oversight. Critics point to the absence of robust judicial checks and balances, and the ability for interception orders to be obtained ex parte (without notifying the target), as deeply concerning.

While the government insists the laws are solely for protection and not “willy-nilly intrusion,” the historical context of internet shutdowns during elections and the arrests for online satire under previous legislation lend credence to the anxieties of rights groups. The debate underscores a critical global challenge: how to strike a delicate balance between ensuring digital safety in an era of rising cyber threats and upholding fundamental human rights in the online sphere. As Zambia navigates this complex landscape, transparent implementation, clear legal definitions, and strong oversight mechanisms will be paramount to ensuring that the pursuit of cybersecurity does not inadvertently erode the very freedoms it purports to protect.