Burundi

A Journalist Was Sentenced to Prison Over a Single WhatsApp Message

Burundi's most striking recent case illustrates just how consequential a private digital message can become. Journalist Sandra Muhoza was sentenced to 21 months in prison in December 2024 for a WhatsApp message deemed to undermine territorial integrity and incite racial hatred. Even after a May/June 2025 appellate ruling found that Bujumbura courts had lacked territorial jurisdiction over the case — effectively voiding the conviction — she remained detained for months afterward, a pattern rights monitors described as signaling punitive persistence and creating a strong chilling effect on digital reporting more broadly.

Spyware Attacks and Disinformation Campaigns Are Actively Documented

Beyond individual prosecutions, Burundi's digital environment has been shaped by more covert forms of surveillance and manipulation. Digital security in Burundi is further compromised by spyware attacks and disinformation campaigns, according to recent human rights monitoring — meaning the risk to activists, journalists, and ordinary citizens engaging critically online extends beyond visible legal prosecution into less visible technical targeting of devices and communications.

A Cybercrime Law Exists — But Was Passed Under a Government With a Documented Pattern of Digital Repression

Burundi does have formal legal provisions defining and protecting personal data. Law N°1/10 of March 16, 2022, on the Prevention and Repression of Cybercriminality in Burundi, formally defines personal data and provides sanctions against individuals and service providers who violate its provisions. But this legal framework exists within a broader documented pattern — East African legal frameworks in this category, often introduced under the pretext of promoting national security and fighting cybercrime, have repeatedly been used to justify interception of communications, censorship, and monitoring of online user activity, sometimes contradicting rights guaranteed in national constitutions.

Burundi Has Just Taken a First, Modest Step Toward Broader Digital Governance

Amid this challenging environment, Burundi has recently moved to establish at least a foundational policy framework for how it manages digital information more broadly. Burundi officially validated its first National Data Governance Strategy with support from the UN Economic Commission for Africa, aligning with the African Union's framework to advance digital sovereignty — an early, structural step, though one that operates separately from and doesn't resolve the more immediate concerns raised by cases like Sandra Muhoza's prosecution.

What This Means in Practice

Given the documented case of a journalist imprisoned over a private WhatsApp message, and confirmed reports of spyware activity targeting Burundian civil society, general privacy advice has real limits in this environment — a VPN protects network traffic, but doesn't shield someone from prosecution over message content already sent, nor from spyware that has already compromised a device directly. For ordinary personal data protection, a VPN with a verified no-logs policy and strong encryption remains a reasonable baseline measure, and keeping your device's operating system updated helps guard against spyware exploiting unpatched vulnerabilities. But if you are a journalist, activist, or otherwise facing elevated personal risk in Burundi, this is not a situation general advice can adequately address — organizations like the Committee to Protect Journalists and Access Now's Digital Security Helpline can offer guidance suited to genuinely high-risk circumstances that this overview isn't equipped to provide responsibly.

VPNs Are Legal — And Burundi's Own Elections Prove Their Value

VPN use itself is legal in Burundi — there's no ban on the technology, and no laws prohibit it. The country has a well-documented, recurring pattern of restricting social media specifically around elections and protests, dating back to the 2015 political crisis. During the May 2020 elections, WhatsApp, Facebook, and Twitter were all inaccessible without a VPN — one Bujumbura resident described only learning to install one after a friend told her what was going wrong that morning.

A Pattern That Goes Back a Decade

This isn't a one-off. Authorities blocked mobile access to Twitter, Instagram, Facebook, and WhatsApp during the 2015 protests against President Nkurunziza's bid for a third term, with independent radio stations shut down alongside the platform blocks. Burundi is one of at least fourteen African countries that have restricted social media access specifically due to elections since 2015 — a clear, repeated pattern rather than an isolated event.

What to Look For in a UCN VPN for Burundi

Given this recurring pattern, a UCN VPN with reliable, obfuscated servers is a genuinely smart precaution — not overkill. Look for WireGuard® or ChaCha20-Poly1305 encryption combined with an independently audited no-logs policy, and install and test the app well before any election period, since past restrictions have hit specific platforms over mobile data without warning.

What "No-Logs" Actually Means

A no-logs policy means the VPN provider stores no record of your browsing activity, IP address, or connection times — so there's nothing to hand over if it's ever requested. Given Burundi's history of press restrictions and platform blocking during politically sensitive periods, choosing a provider with a genuinely audited no-logs policy is a meaningful, practical safeguard for personal privacy.

Getting Started in Under a Minute

Download the UCN VPN app, sign in, and tap Connect — your traffic is encrypted immediately. Given Burundi's decade-long pattern of blocking social media around elections, setting up and testing your UCN VPN now, well ahead of any future election period, is the smartest move you can make.

Burundi's VPN use is fully legal, and its own election history is one of the clearest examples anywhere of why having one ready in advance genuinely matters.