Regulation of Interception of Communications and Provision of Communication-related Information Act 70 of 2002 (RICA)

The Regulation of Interception of Communications and Provision of Communication-related Information Act 70 of 2002 (RICA) is South Africa's dedicated statute governing the lawful interception of communications and the provision of communication-related information (metadata). It was assented to in 2002 and brought substantially into force on 30 September 2005. RICA establishes a general prohibition on intercepting any communication in the course of its transmission, and on obtaining communication-related information, except as expressly authorised by the Act. It is the principal legal basis on which the State may conduct targeted communications surveillance, and it operates alongside the Cybercrimes Act 19 of 2020 and the Protection of Personal Information Act 4 of 2013. Interception and metadata directions may, as a rule, only be authorised by a single 'designated judge', a retired or discharged judge appointed by the Minister of Justice, on ex parte application by specified law-enforcement and intelligence agencies. Directions are available where there are reasonable grounds to believe a serious offence has been or will be committed, or to gather information on threats to national security, public health or safety, or compelling national economic interests. The Act provides for real-time and archived communication-related directions, decryption directions, entry warrants, and limited oral directions in urgent cases. The Office for Interception Centres and related structures support execution. RICA imposes extensive obligations on electronic communications service providers: to acquire and maintain interception-capable systems, to route duplicate signals to interception centres, to store communication-related information, and historically to register SIM cards and verify customer identities, giving the Act a strong telecoms-regulatory dimension. The Act's protections for affected individuals are limited. There is no general requirement to notify a person that they were placed under surveillance, and the original text contained no special safeguards for confidential journalistic sources or legally privileged communications. These deficiencies were challenged successfully in AmaBhungane Centre for Investigative Journalism v Minister of Justice [2021] ZACC 3, where the Constitutional Court declared RICA unconstitutional in several respects, the absence of post-surveillance notification, insufficient guarantees of the designated judge's independence, the lack of special procedures where the subject is a journalist or lawyer, inadequate procedures for handling and storing intercepted data, and the absence of any lawful framework for bulk interception (which was declared unlawful). The Court suspended the declaration to allow Parliament to cure the defects and read in interim safeguards. RICA therefore remains in force but subject to constitutionally mandated reform, and the summary of its oversight should be read with the AmaBhungane findings in mind: judicial authorisation exists but was held, as designed, to fall short of constitutional adequacy.

1. 1General prohibition on the interception of communications and provision of communication-related information except as authorised by the Act.
2. 2All interception and metadata directions must be authorised by a single designated judge (a retired or discharged judge appointed by the Minister); applications are made ex parte and in secret.
3. 3Permits real-time and archived communication-related (metadata) directions, decryption directions, and entry warrants, generally tied to serious offences or threats to national security, public health/safety, or compelling national economic interests.
4. 4Imposes duties on electronic communications service providers to deploy interception-capable systems, route duplicate signals to interception centres, store communication-related information, and (historically) register SIM cards and verify subscriber identities.
5. 5Provides almost no post-surveillance notification to subjects and originally contained no special protections for journalists or lawyers.
6. 6In AmaBhungane (2021) the Constitutional Court declared RICA unconstitutional for failing to provide adequate safeguards, no subject notification, insufficient independence of the designated judge, no special treatment for journalists/lawyers, inadequate data-management procedures, and no lawful basis for bulk surveillance, and ordered Parliament to remedy the defects, with interim reading-in safeguards.