Submit your papersSubmit Now
For Enquiries: [email protected]
IIARD LogoIIARD

Cross-Border Cybersecurity Cooperation: Challenges in Enforcing Cybersecurity Laws in Africa

Kelvin Bribena PhD

Abstract

The increasing transnational nature of cybercrime has created significant challenges for the enforcement of cybersecurity laws in Africa. Cyberattacks frequently involve offenders, victims, digital infrastructure and electronic evidence located across multiple jurisdictions, making traditional territorial approaches to criminal enforcement increasingly inadequate. This article examined the challenges affecting cross-border enforcement of cybersecurity laws in Africa, with particular focus on international cooperation, extradition and jurisdiction. Specifically, the study further examined the effectiveness of existing legal frameworks for cross- border cybersecurity cooperation, analyse the challenges associated with jurisdiction and extradition in cybercrime investigations and prosecutions, and identify measures capable of strengthening international cooperation and enforcement mechanisms. The article adopted a doctrinal and comparative legal research methodology. It analysed international, regional and national legal instruments, including the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention), the Council of Europe Convention on Cybercrime (Budapest Convention), the United Nations Convention against Cybercrime, and selected African cybersecurity and cybercrime legislation from jurisdictions such as Nigeria, Kenya and South Africa. The study also examined institutional practices and reports from organisations involved in cybercrime cooperation, including INTERPOL and AFRIPOL. The article argued that Africa’s principal cybersecurity enforcement challenge is not simply the absence of cybercrime legislation but the gap between legal frameworks and practical cooperation. Difficulties relating to overlapping jurisdictional claims, extradition restrictions, dual criminality requirements, delays in mutual legal assistance procedures, limited technical capacity and fragmented institutional structures continue to weaken effective enforcement. The article concluded with recommendations that stronger harmonisation of cybercrime laws, improved extradition and mutual assistance mechanisms, faster electronic-evidence cooperation and greater institutional capacity-building are necessary to develop an effective African framework for combating transnational cybercrime while preserving sovereignty, privacy and human-rights protections.

Keywords

Cybercrime; Cybersecurity Law; Africa; Cross-Border Cooperation; Jurisdiction; Extradition; Electronic Evidence. 1 Kelvin BribenaLLBBLLLMM.ScM.EdLLDACIArbFNIMNHead of DepartmentJur

References

1 Kelvin Bribena, LLB, BL, LLM, M.Sc, M.Ed, LLD, ACIArb, FNIMN, Head of Department, Jurisprudence and International Law, Faculty of Law, Niger Delta University, Wilberforce Island, Bayelsa State, Nigeria 2 INTERPOL, Africa Cyberthreat Assessment Report 2026 (INTERPOL 2026) <https://www.interpol.int/Crimes/Cybercrime> accessed 16 August 2026. 3 INTERPOL, ‘New INTERPOL Report Warns of Sharp Rise in Cybercrime in Africa’ (23 June 2025) <https://www.interpol.int/News-and-Events/News/2025/New-INTERPOL-report-warns-of-sharp-rise-incybercrime-in-Africa> accessed 16 August 2026. 4 African Union, African Union Convention on Cyber Security and Personal Data Protection (adopted 27 June 2014, entered into force 8 June 2023) <https://au.int/en/treaties/african-union-convention-cyber-securityand-personal-data-protection> accessed 16 August 2026. 5 Council of Europe, Convention on Cybercrime (Budapest Convention) (opened for signature 23 November 2001, ETS No 185) <https://www.coe.int/en/web/cybercrime/the-budapest-convention> accessed 16 August 2026. 6 United Nations, United Nations Convention against Cybercrime (adopted by General Assembly Resolution 79/243, 24 December 2024) <https://www.unodc.org/unodc/en/cybercrime/convention/home.html> accessed 16 August 2026. 7 Computer Misuse and Cybercrimes Act 2018 (Kenya), s 66 <https://www.odpc.go.ke/wpcontent/uploads/2022/02/Computer-Misuse-and-Cybercrimes-Act-No.-5-of-2018.pdf> accessed 16 August 2026. 8 Cybercrimes (Prohibition, Prevention, etc) Act 2015 (Nigeria), Part VII <https://cert.gov.ng/cybercrimes-act2015/> accessed 16 August 2026. 9 Cybercrimes Act 19 of 2020 (South Africa) <https://www.justice.gov.za/legislation/acts/2020-019.pdf> accessed 16 August 2026. 10 Convention on Cybercrime (Budapest Convention) (n 4) art 22. 11 United Nations Convention against Cybercrime (n 5) art 22. 12 African Union, ‘African Union Convention on Cyber Security and Personal Data Protection Enters into Force’ (2023) <https://au.int/en/articles/african-union-convention-cyber-security-and-personal-data-protectionenters-force> accessed 16 August 2026. 13 African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) (n 3) art 28. 14 Uchenna Jerome Orji, ‘Multilateral Legal Responses to Cyber Security in Africa: Any Hope for Effective International Cooperation?’ in 7th International Conference on Cyber Conflict: Architectures in Cyberspace (NATO Cooperative Cyber Defence Centre of Excellence 2015) 95 <https://ccdcoe.org/uploads/2018/10/Art08-Multilateral-Legal-Responses-to-Cyber-Security-in-Africa-Any-Hope-for-Effective-InternationalCooperation.pdf> accessed 16 August 2026. 15 Chatham House, ‘The AU Can Help African Countries Adopt the UN Cybercrime Convention, but Challenges Are Significant’ (2025) <https://www.chathamhouse.org/> accessed 16 August 2026. 16 Convention on Cybercrime (Budapest Convention) (n 4) arts 24, 25, 29 and 35. 17 Council of Europe, ‘The Budapest Convention on Cybercrime: 82 Parties Worldwide’ (2026) <https://www.coe.int/en/web/cybercrime> accessed 16 August 2026. 18 Council of Europe, Second Additional Protocol to the Convention on Cybercrime on Enhanced Cooperation and Disclosure of Electronic Evidence (CETS No 224) <https://www.coe.int/en/web/cybercrime/secondadditional-protocol> accessed 16 August 2026. 19 United Nations General Assembly, Countering the Use of Information and Communications Technologies for Criminal Purposes: United Nations Convention against Cybercrime UN Doc A/RES/79/243 (24 December 2024) <https://docs.un.org/en/A/RES/79/243> accessed 16 August 2026. 20 United Nations Convention against Cybercrime (n 5) art 65. 21 United Nations Convention against Cybercrime (n 5) art 40; see also Eurojust, United Nations Convention against Cybercrime (Factsheet, 2025) <https://www.eurojust.europa.eu/publication/united-nationsconvention-against-cybercrime> accessed 16 August 2026. 22 Economic Community of West African States (ECOWAS), Directive C/DIR.1/08/11 on Fighting Cyber Crime within ECOWAS (2011) <https://africanlii.org/akn/aa-ecowas/act/directive/2011/8-1/eng@2011-12-31> accessed 16 August 2026. 23 Economic Community of West African States (ECOWAS), Directive C/DIR.1/08/11 on Fighting Cyber Crime within ECOWAS (2011) <https://africanlii.org/akn/aa-ecowas/act/directive/2011/8-1/eng@2011-12-31> accessed 16 August 2026. 24 ECOWAS Commission, Request for Expression of Interest: Revision of the ECOWAS Directive on Fighting Cyber Crime (2025) <https://ecowas.int/wp-content/uploads/2025/01/1.-English_-REOI-ToR-Revision-of-theDirective-on-fighting-Cybercrime.pdf> accessed 16 August 2026. 25 Economic Community of West African States, Convention A/P.1/8/94 on Extradition (adopted 6 August 1994) <https://africanlii.org/akn/aa-ecowas/act/convention/1994/p1-8/eng@1994-08-06> accessed 16 August 2026. 26 Southern African Development Community (SADC), Harmonised Cybersecurity Legal and Regulatory Framework (2012) <https://www.sadc.int/document/harmonised-cybersecurity-legal-and-regulatoryframework> accessed 16 August 2026. 27 Common Market for Eastern and Southern Africa (COMESA), Model Cybercrime Law (2011) <https://www.comesa.int> accessed 16 August 2026. 28 East African Community, EAC Regional Cybersecurity Framework and Data Protection Initiatives <https://www.eac.int/eardip-data-market/eardip-cybersecurity> accessed 16 August 2026. 29 Computer Misuse and Cybercrimes Act 2018 (Kenya) s <66 https://www.odpc.go.ke/wpcontent/uploads/2022/02/Computer-Misuse-and-Cybercrimes-Act-No.-5-of-2018.pdf> accessed 16 August 2026. 30 United Nations Convention against Cybercrime (n 5) art 22. 31 Ilias Bantekas and Susan Nash, International Criminal Law (4th edn, Routledge 2019) 196–200. 32 Geoff Gilbert, Aspects of Extradition Law (Martinus Nijhoff Publishers 1991) 54–58. 33 ECOWAS Convention A/P.1/8/94 on Extradition (n 24) art 10. 34 United States Department of Justice, ‘Four Men Arrested in Côte d’Ivoire for International Sextortion Scheme Resulting in the Death of a Minor’ (9 May 2025) <https://www.justice.gov/opa/pr/ivorian-menarrested-international-sextortion-and-money-laundering-scheme-resulting-minors> accessed 16 August 2026. 35 United States Department of Justice, ‘Nigerian Brothers Sentenced for Sextortion Scheme that Resulted in Death of Teen’ (2024) <https://www.justice.gov/opa/pr/nigerian-brothers-sentenced-sextortion-schemeresulted-death-teen> accessed 16 August 2026. 36 United Nations Office on Drugs and Crime, Comprehensive Study on Cybercrime (UNODC 2013) 218–222 <https://www.unodc.org/documents/organizedcrime/UNODC_CCPCJ_EG.4_2013/UNODC_Cybercrime_Study_210213.pdf> accessed 16 August 2026. 37 INTERPOL, ‘Red Notices’ <https://www.interpol.int/How-we-work/Notices/Red-Notices> accessed 16 August 2026. 38 Convention on Cybercrime (Budapest Convention) (n 4) arts 25, 29 and 35. 39 Cybercrimes (Prohibition, Prevention, etc) Act 2015 (Nigeria), ss 50–56 <https://cert.gov.ng/cybercrimes-act2015/> accessed 16 August 2026 40 INTERPOL, Africa Cyberthreat Assessment Report 2025 (INTERPOL 2025) <https://www.interpol.int/Newsand-Events/News/2025/New-INTERPOL-report-warns-of-sharp-rise-in-cybercrime-in-Africa> accessed 16 August 2026. 41 Convention on Cybercrime (Budapest Convention) (n 4) art 35; Council of Europe, The Budapest Convention on Cybercrime: 24/7 Network <https://www.coe.int/en/web/cybercrime/24-7-network> accessed 16 August 2026. 42 United Nations Convention against Cybercrime (n 5) art 41; United Nations Office on Drugs and Crime, United Nations Convention against Cybercrime: Full Text <https://www.unodc.org/unodc/en/cybercrime/convention/text/convention-full-text.html> accessed 16 August 2026. 43 INTERPOL, ‘I-24/7: INTERPOL’s Global Police Communications System’ <https://www.interpol.int/Who-weare/How-we-work/I-24-7> accessed 16 August 2026. 44 INTERPOL, ‘African Authorities Dismantle Massive Cybercrime and Fraud Networks, Recover Millions’ (Operation Serengeti 2.0, 2025) <https://www.interpol.int/News-and-Events/News/2025/African-authoritiesdismantle-massive-cybercrime-and-fraud-networks-recover-millions> accessed 16 August 2026. 45 Uchenna Jerome Orji, ‘The African Union Convention on Cyber Security: A Regional Response Towards Cyber Stability?’ (2018) 12(2) Masaryk University Journal of Law and Technology 91, <doi:10.5817/MUJLT2018-2-1>. 46 East African Community, Cybersecurity and Data Governance Initiatives <https://www.eac.int/eardip-datamarket/eardip-cybersecurity> accessed 16 August 2026. 47 United Nations Convention against Cybercrime (n 5) arts 35–41. 48 Uchenna Jerome Orji, ‘An Inquiry into the Legal Status of the ECOWAS Cybercrime Directive and the Implications of its Obligations for Member States’ (2019) 35(6) Computer Law & Security Review 105330, <doi:10.1016/j.clsr.2019.06.001>. 49 United Nations Convention against Cybercrime (n 5) art 36. 50 INTERPOL, Africa Cyberthreat Assessment Report 2025 (n 39). 51 INTERPOL, ‘Operation Serengeti 2.0: African Authorities Target Cybercrime Networks’ (2025) <https://www.interpol.int/News-and-Events/News/2025/African-authorities-dismantle-massive-cybercrimeand-fraud-networks-recover-millions> accessed 16 August 2026.