Jul 2026· Potchefstroom Electronic Law Journal· Vol 29· 0 citations
TL;DR
The article shows how procurement-led deployment and security exceptions hollow out constitutional rights that the legal texts appear to guarantee, and proposes a hybrid governance model that closes this gap by anchoring transparency and accountability in constitutional baselines.
Abstract
South African and Nigerian law guarantees rights to privacy and due process, but national security carve-outs and proprietary artificial intelligence (AI) systems shielded from regulatory scrutiny can make those protections difficult to enforce. As African governments progressively rely on foreign vendors for AI-enabled surveillance technologies, a central question is how constitutional protections can be meaningfully enforced when the systems governing surveillance remain technically and legally inaccessible to domestic oversight. The theoretical contribution is the concept of the algorithmic sovereignty gap, which names the persistent disjunction between constitutional guarantees and the operational realities of vendor-controlled tools. Drawing on qualitative content analysis of constitutional law, statutes, case law, and investigative reporting in both countries, and extending Pasquale's black-box problem and Couldry and Mejias's data colonialism framework through a postcolonial lens, the article shows how procurement-led deployment and security exceptions hollow out constitutional rights that the legal texts appear to guarantee. The prescriptive contribution is a hybrid governance model that closes this gap by anchoring transparency and accountability in constitutional baselines, supported by mandatory AI impact assessments, audit rights, source-code escrow, data localisation, and procurement transparency.
Existing privacy and surveillance frameworks fail to govern structural democratic harms because their foundational paradigm requires demonstrable individual injury as the threshold for legal intervention. This paper diagnoses that failure through the Israeli constitutional experience, where a 99.3 per cent judicial app...
Eyal Sabro, Bartolomé Torralbo Muñoz· Journal of Data Protection &...· 0 citations
The central claim is that constitutional and democratic requirements should not be treated as external compliance burdens when embedded into institutional design, they operate as productive constraints that improve legitimacy, implementation discipline, and the long-term trustworthiness of AI-enabled public decision-ma...
C. Oliveira· Open Access Journal of Data...· 0 citations
The study concludes that the legal and institutional frameworks governing cross-border data transfers in Tanzania are not yet effective in regulating digital platforms and recommends legislative and regulatory reforms, institutional strengthening, and policy and practice.
Josephina John· East African Journal of Law...· 0 citations
Global businesses face growing privacy and data protection obligations. Duties can vary by jurisdiction, and many businesses struggle to decide where to direct finite compliance resources. This paper, developed from a panel the authors prepared for the IAPP Global Summit 2026, argues that the European Union’s (EU) Gene...
Lothar Determann, Graham Doyle, Jennifer M. Urban et al.· Journal of Data Protection &...· 0 citations
Abstract The term data sovereignty—the principle that data is subject to the laws and governance of the country where it is collected or stored—faces implementation challenges. The legal deadlock over how to regulate transatlantic (E.U.–U.S.) data transfers reveal the difficulties of asserting “sovereignty” over data,...