Communications Act, 2009 (Act No. 8 of 2009) (Namibia)

The Communications Act, 2009 (Act No. 8 of 2009, GG 4378) is Namibia's principal telecommunications, broadcasting and postal statute and establishes the Communications Regulatory Authority of Namibia (CRAN). It carries two dimensions in this library: the core telecoms regime, and Part 6 (Interception of Telecommunications), the most consequential digital-rights element of Namibian law. On the Telecoms dimension, the Act is Namibia's converged statute for telecommunications, broadcasting and postal services and the radio frequency spectrum. Section 4 establishes CRAN as the independent regulator, mandated to regulate, supervise and promote telecommunications services and networks, broadcasting, postal services and the use and allocation of the spectrum. All telecommunications providers must hold a valid CRAN licence, individual or class, depending on the service, and CRAN grants, renews, amends, transfers, suspends and revokes licences and regulates market entry, competition, interconnection, tariffs and quality of service. CRAN manages the radio frequency spectrum, allocating and assigning frequencies to prevent interference and ensure efficient use, and administers numbering. The Act establishes a Universal Service Fund to extend communications to rural and underserved areas. Most of the Act commenced in 2011 and it is implemented through licensing, spectrum and related regulations made under section 129. On the Digital Rights dimension, Part 6 (Chapter V) provides the enabling framework for wide-ranging state surveillance of electronic communications. It provides for the establishment of interception centres (s.70), duties relating to interception (s.71), assistance by and compensation of telecommunications service providers (s.72), a duty on service providers to obtain prescribed customer information (s.73), the functions of the Authority relating to interception (s.74), interception equipment (s.76), and the power to make interception regulations (s.77). Section 73 is the basis for mandatory SIM-card registration: it obliges mobile providers to collect each customer's full name, residential address and Namibian identity/passport/driving-licence number specifically so that "it [is] possible to intercept the telecommunications of that customer." Implementing regulations also contemplate retention of all telecommunications and internet traffic data for five years. For more than a decade after enactment, Part 6 was not operationalised because implementing regulations had not been finalised, even though most of the Act commenced in 2011. That changed with the gazetting of regulations under Part 6 on 15 March 2021 and of conditions imposed on internet and telecommunications service providers on 28 April 2022, moving SIM registration and the interception framework towards activation. Digital-rights advocates (the Association for Progressive Communications, the Institute for Public Policy Research, the Legal Assistance Centre and others) have warned that Part 6 enables mass surveillance and that the data-retention and registration regime is ripe for abuse absent strong, independent oversight; the LAC has examined the constitutionality of the data-retention scheme against the privacy guarantee in Article 13 of the Namibian Constitution. Oversight of the interception regime is widely regarded as weak, and Namibia still lacks an enacted data-protection statute (the Data Protection Bill remains in draft). The Act should be read together with the draft Cybercrime Bill, which would supply substantive computer offences. CRAN is the named regulator; interception centres sit with the security apparatus.

1. 1Telecoms: principal converged statute for telecommunications, broadcasting, postal services and the radio frequency spectrum; s.4 establishes CRAN as the independent regulator
2. 2Telecoms: requires all telecommunications providers to hold a CRAN licence (individual or class); CRAN regulates market entry, interconnection, tariffs and quality of service
3. 3Telecoms: CRAN manages radio frequency spectrum allocation/assignment and numbering, and the Act establishes a Universal Service Fund for rural/underserved areas
4. 4Part 6 (Chapter V) establishes the legal framework for interception of telecommunications, including state interception centres (s.70)
5. 5Imposes duties on telecommunications service providers to assist with interception and maintain interception capability (ss.71 - 72, 76)
6. 6Section 73 mandates collection of prescribed customer information (full name, residential address, ID/passport/licence number) to enable interception, the statutory basis for SIM-card registration
7. 7Implementing regime contemplates retention of all telecommunications and internet traffic data for up to five years
8. 8Long dormant for lack of regulations; Part 6 regulations gazetted 15 March 2021 and ISP conditions gazetted 28 April 2022, moving the surveillance framework towards operation
9. 9Oversight is widely criticised as inadequate; no enacted data-protection law yet constrains use of the collected data (Data Protection Bill still in draft)