The digital revolution has fundamentally transformed the way nations govern, conduct business, deliver public services, communicate, and safeguard national security. Across the globe, governments are increasingly confronted with complex cyber threats that transcend national borders and challenge traditional legal frameworks. Cybercrime has evolved into one of the fastest-growing forms of transnational crime, affecting individuals, businesses, financial institutions, governments, and critical national infrastructure alike. From ransomware attacks and identity theft to cyber espionage, online financial fraud, election interference, and digital terrorism, cyberspace has become both an engine of innovation and a new battlefield for criminal activity.
South Sudan, despite being one of the least technologically advanced and the world’s youngest nations, has not been immune to these global developments. Internet penetration continues to expand, smartphone ownership has increased considerably, mobile money services are becoming more accessible, and government institutions are gradually embracing digital technologies to improve public administration. Social media platforms have emerged as the country’s most influential space for political engagement, civic participation, public debate, and the dissemination of information.
These developments have created significant opportunities for economic growth, innovation, financial inclusion, and democratic participation. Yet they have simultaneously exposed the country to new vulnerabilities that traditional criminal laws were never designed to address.
For many years, South Sudan lacked a comprehensive legal framework specifically addressing offences committed through computers, digital networks, electronic communications, and online platforms. Criminal legislation inherited from earlier legal systems primarily contemplated conventional offences committed in the physical world. Investigators and prosecutors frequently encountered legal uncertainty when confronted with offences involving unauthorized access to computer systems, digital fraud, hacking, electronic forgery, cyber harassment, online child exploitation, and attacks against digital infrastructure.
Recognizing this legislative gap, the Government of the Republic of South Sudan enacted the Cybercrime and Computer Misuse Act, 2026. On 17 July 2026, the Government further announced the operationalization of the Act pursuant to Presidential Directive No. 03/2026 and established the National Cyber-Security Task Force together with the National Cyber-Security Steering Committee to coordinate implementation across government institutions and critical sectors.
From both a governance and a national security perspective, these developments deserve recognition. Every sovereign state possesses not only the authority but also the obligation to protect its digital infrastructure, financial systems, communication networks, electoral processes, and citizens against cyber threats. A modern state cannot effectively function without legal mechanisms capable of investigating and prosecuting offences committed in cyberspace.
However, the operationalization of this legislation only a few months before South Sudan’s anticipated December 2026 General Elections also raises important constitutional, legal, and democratic questions. Cybersecurity legislation, by its very nature, often intersects with fundamental rights such as freedom of expression, privacy, access to information, freedom of association, and media independence. Consequently, its implementation demands careful adherence to constitutional principles and internationally recognized human rights standards.
The central issue, therefore, is not whether South Sudan requires cybercrime legislation. It undoubtedly does. Rather, the more significant question is whether the Cybercrime and Computer Misuse Act will be implemented in a manner that effectively combats cybercrime while simultaneously preserving constitutional democracy, the rule of law, and fundamental freedoms.
This article examines the significance of the operationalization of the Cybercrime and Computer Misuse Act, analyses its constitutional implications, evaluates its potential impact on democratic governance ahead of the December 2026 General Elections, and proposes measures that can ensure the Act strengthens rather than weakens South Sudan’s constitutional order.
Why South Sudan needs a comprehensive cybercrime law
The enactment of the Cybercrime and Computer Misuse Act should be understood within the broader context of South Sudan’s ongoing digital transformation. Over the past decade, digital technologies have become increasingly integrated into nearly every aspect of public and private life. Government ministries rely on electronic records and communication systems, commercial banks conduct digital financial transactions, humanitarian agencies depend upon online data management, educational institutions utilize digital learning platforms, and ordinary citizens conduct business, communicate with family, and access information through mobile devices. As these technologies become more deeply embedded within society, so too do the risks associated with their misuse.
Modern conflicts have also demonstrated that cyber threats are no longer confined to financial crime. States and non-state actors alike employ cyber tools to steal confidential information, disrupt essential services, spread disinformation, manipulate public opinion, and interfere with electoral processes. Consequently, cybersecurity has evolved into an essential component of national security.
South Sudan cannot reasonably expect to remain insulated from these developments simply because its digital infrastructure is still evolving. On the contrary, emerging digital economies are often particularly vulnerable due to limited technical capacity, insufficient cybersecurity awareness, and underdeveloped legal frameworks.
Before the enactment of the Cybercrime and Computer Misuse Act, law enforcement agencies frequently relied upon traditional criminal provisions that were ill-equipped to address technologically sophisticated offences. Existing legislation provided limited guidance on the admissibility of digital evidence, preservation of electronic data, unauthorized access to computer systems, or prosecution of offences committed through online platforms.
The Cybercrime and Computer Misuse Act therefore fills an important legislative void by modernizing South Sudan’s criminal justice framework and equipping investigators, prosecutors, and courts with legal mechanisms specifically tailored to cyber-related offences.
The Government’s decision to operationalize the Cybercrime and Computer Misuse Act represents more than the activation of a statute. It signals the beginning of a broader institutional effort to establish a coherent national cybersecurity framework capable of responding to increasingly sophisticated digital threats.
The establishment of the National Cyber-Security Task Force and the National Cyber-Security Steering Committee provides an opportunity to improve coordination among government ministries, law enforcement agencies, intelligence services, telecommunications regulators, financial institutions, and other stakeholders responsible for protecting the country’s digital infrastructure.
Such institutional reforms are essential because cybersecurity cannot be achieved through legislation alone. Effective implementation requires trained investigators, specialized prosecutors, digital forensic laboratories, technically competent judges, robust public-private cooperation, and sustained investment in technological capacity. It also requires public confidence that cybersecurity institutions will operate impartially, transparently, and in strict conformity with the Constitution.
The Government has stated that implementation of the Act will occur within the constitutional and statutory framework established by law. That commitment is both welcome and necessary. Ultimately, the success of the Cybercrime and Computer Misuse Act will not depend solely upon the text enacted by Parliament or the institutions created to implement it. Rather, its legitimacy will be measured by the fairness, consistency, transparency, and constitutional fidelity with which those institutions exercise the powers entrusted to them.
The operationalization of the Cybercrime and Computer Misuse Act must be understood within the broader constitutional framework of the Republic of South Sudan. While governments possess a legitimate responsibility to protect national security and public order, those responsibilities must always be exercised within the limits established by the Constitution. In every constitutional democracy, security and liberty are not opposing ideals but complementary pillars that reinforce one another.
The Cybercrime and Computer Misuse Act cannot be interpreted or enforced in isolation. Every investigation, prosecution, administrative action, or regulatory decision undertaken pursuant to the Act must remain subject to constitutional scrutiny and judicial oversight. The operationalization of the Act does not create extraordinary powers beyond constitutional control; rather, it establishes legal mechanisms whose legitimacy depends upon faithful adherence to constitutional principles.
The Government has publicly affirmed that implementation will occur strictly within the constitutional and statutory framework established by law. That commitment is both encouraging and necessary. Public confidence in the Act will depend less upon the existence of the legislation itself than upon whether its enforcement consistently demonstrates impartiality, legality, accountability, and respect for fundamental rights.
Freedom of expression: A constitutional cornerstone
Among the constitutional rights most directly engaged by cybercrime legislation is the right to freedom of expression. Article 24 of the Transitional Constitution guarantees every citizen the freedom of expression, publication, dissemination of information, access to the press, and the right to receive and communicate ideas. These freedoms constitute the foundation of democratic governance because they enable citizens to participate meaningfully in public affairs, hold public officials accountable, and contribute to informed national dialogue.
In today’s world, these constitutional freedoms are exercised predominantly through digital platforms. Newspapers publish online, journalists communicate through electronic media, political parties organize campaigns using social media, civil society organizations conduct advocacy through digital networks, and citizens engage in public debate using smartphones and internet-based communication. Cyberspace has therefore become an extension of the constitutional public square.
This reality requires careful interpretation of provisions within the Cybercrime and Computer Misuse Act that regulate online communications. Laws designed to combat genuine cybercrime should never inadvertently discourage lawful criticism of government policies, investigative journalism, academic research, public interest advocacy, artistic expression, satire, or peaceful political disagreement.
Democracy flourishes when citizens are free to express differing opinions without fear of arbitrary criminal sanction. Equally, democracy requires that freedom of expression be exercised responsibly. Constitutional protection does not extend to incitement of violence, direct threats against individuals, child exploitation, cyber fraud, terrorism, or other forms of criminal conduct merely because such conduct occurs through digital platforms. The constitutional challenge, therefore, lies in maintaining an appropriate balance between protecting society from genuine online harm and preserving the robust exchange of ideas that is indispensable to democratic governance.
Media freedom and the public interest
The digital age has transformed journalism. Traditional newspapers now coexist with online news platforms, citizen journalism, podcasts, digital broadcasting, and social media reporting. In South Sudan, where access to digital communication has expanded significantly, online media increasingly shape public understanding of political, social, and economic developments.
Investigative journalism performs an essential democratic function by exposing corruption, abuse of office, maladministration, misuse of public resources, and violations of human rights. Journalists often rely upon confidential sources, electronic documents, digital communications, and online databases when reporting matters of public importance.
Cybercrime legislation should therefore be interpreted in a manner that distinguishes genuine criminal activity from responsible investigative reporting undertaken in good faith and in the public interest. An environment in which journalists fear criminal prosecution for exposing matters of legitimate public concern risks weakening democratic accountability rather than strengthening national security. Public confidence in government institutions is not preserved by suppressing legitimate reporting but by ensuring transparency, accountability, and adherence to the rule of law. Responsible journalism and effective cybersecurity should reinforce one another; both contribute to the creation of a stable, informed, and resilient society.
Privacy rights in the digital age
The constitutional right to privacy assumes even greater significance in an era where enormous quantities of personal information are stored electronically. Electronic devices contain intimate details of an individual’s private life, including communications, financial records, professional correspondence, photographs, medical information, and personal data. Access to such information by public authorities constitutes a significant intrusion into individual privacy and therefore requires strong legal safeguards.
Article 27 of the Transitional Constitution guarantees the right to privacy and protection against arbitrary interference with personal communications and property. The effective investigation of cybercrime may occasionally require lawful access to electronic devices, communications, subscriber information, or digital records. However, such powers should be exercised only where authorized by law and, wherever appropriate, subject to independent judicial authorization.
The protection of privacy should never be viewed as an obstacle to effective policing. Rather, it is an essential safeguard ensuring that investigative powers are exercised lawfully, proportionately, and only where genuinely necessary.
Freedom of association, assembly, and political participation
Modern democratic participation increasingly occurs online. Political parties announce policy positions through digital platforms. Civil society organizations organize public campaigns using social media. Citizens discuss governance through online forums. Community organizations coordinate humanitarian responses electronically. Electoral candidates engage directly with voters through digital communication.
Consequently, online communication has become an extension of the constitutional freedoms of association and peaceful assembly protected under Article 25 of the Transitional Constitution. Restrictions affecting digital communications may therefore have implications extending beyond cyberspace itself. Limitations imposed upon online political engagement can indirectly affect citizens’ ability to organize peacefully, advocate for policy reform, or participate effectively in democratic processes.
This consideration becomes particularly significant during election periods when political communication naturally intensifies. Implementation of the Cybercrime and Computer Misuse Act should therefore preserve an open digital environment that allows lawful political competition while addressing genuine threats such as coordinated cyber-attacks, election interference, identity theft, and incitement to violence.
Legal certainty and the principle of legality
One of the defining characteristics of the rule of law is legal certainty. Criminal legislation should clearly define prohibited conduct so that ordinary citizens may reasonably understand what behavior constitutes a criminal offence. Ambiguous or overly broad provisions risk inconsistent interpretation and arbitrary enforcement.
The Government has identified provisions of the Cybercrime and Computer Misuse Act dealing with undesirable online content, publication of false or misleading information, cyber harassment, cyberbullying, and conduct threatening national security. The objectives behind these provisions are entirely legitimate. South Sudan has experienced ethnic incitement, online misinformation capable of inflaming communal tensions, digital harassment, and misuse of electronic platforms to spread harmful content. The Government therefore has a legitimate interest in preventing conduct capable of causing substantial public harm.
Nevertheless, concepts such as “undesirable content,” “false information,” “public panic,” or “national security” require careful judicial interpretation to ensure consistency with constitutional principles. International human rights jurisprudence generally recognizes that democratic societies distinguish between intentionally false statements causing demonstrable harm and expressions of opinion, political criticism, satire, academic debate, investigative reporting, or commentary on matters of public interest.
The legitimacy of the Cybercrime and Computer Misuse Act will therefore depend significantly upon the manner in which prosecutors and courts interpret and apply these provisions. A narrow, objective, and constitutionally consistent interpretation will strengthen public confidence. Broad or unpredictable interpretation may produce legal uncertainty and discourage legitimate democratic participation.
The writer is a legal scholar, governance and public policy analyst, and researcher whose work focuses on constitutional law, human rights, environmental law, digital governance, public administration, and the rule of law. He can be reached at dr.stephen.dhieu@gmail.com.
The views expressed in ‘opinion’ articles published by Radio Tamazuj are solely those of the writer. The veracity of any claims made is the responsibility of the author, not Radio Tamazuj.
and then