Source Protection and the Protection of Journalistic Materials
Module 4: Privacy and Security Online
The confidentiality of journalistic sources is central to journalists’ ability to properly investigate stories, and to the protection of individuals and whistleblowers who provide information to them.(1) Efforts to compel the disclosure of sources have a chilling effect on freedom of speech and media freedom and hinder the free flow of information.(2)
In this regard, General Comment No. 34 to the ICCPR provides that states parties “should recognise and respect that element of the right of freedom of expression that embraces the limited journalistic privilege not to disclose sources.” Furthermore, the Africa Commission on Human and Peoples’ Rights issued the Declaration of Principles on Freedom of Expression in Africa in 2019, which deals with the issue of protection of sources by providing as follows:
“Journalists and other media practitioners shall not be required to reveal confidential sources of information or to disclose other material held for journalistic purposes except where disclosure has been ordered by a court after a full and fair public hearing.”(3)
The Declaration emphasises that this should only take place where the identity of the source is necessary for the investigation or prosecution of a serious crime, where the information can’t be obtained from elsewhere, and whether the public interest in disclosure outweighs the harm to freedom of expression.
It is important to note that the protection of sources has acquired new significance in the digital age in the context of the right to privacy of communications as surveillance technologies whose development is justified in terms of national security can be used to target journalists and their confidential sources.(4) The Secretary-General of the UN has noted surveillance activities can have a chilling effect on media freedom and makes it more difficult for journalists to communicate with sources and share and develop ideas, which may lead to self-censorship.(5) Similarly, a UN General Assembly resolution on the safety of journalists emphasised that journalists in the digital age are particularly vulnerable to becoming targets of unlawful or arbitrary surveillance, in violation of their rights to privacy and freedom of expression.(6) The resolution further noted that encryption and anonymity tools have become vital to journalists to secure their communications and protect the confidentiality of their sources.
Case Note: The right to source protection in South Africa
In Bosasa Operations (Pty) Ltd v. Basson and Another,(2012) the South Africa High Court established a general proposition that journalists are not required to reveal their sources, subject to certain exceptions. The court stated that:
“If indeed freedom of the press is fundamental and sine qua non for democracy, it is essential that in carrying out this public duty for the public good, the identity of their sources should not be revealed, particularly, when the information so revealed, would not have been publicly known. This essential and critical role of the media, which is more pronounced in our nascent democracy, founded on openness, where corruption has become cancerous, needs to be fostered rather than denuded.”(7)
More recently, in 2023, reaffirming the Bosasa decision, the High Court in Mazetti Management Services v. Amabhungane Centre for Investigative Journalism (2023) stated that “resistance to disgorgement of information on the ground of protecting a source is functional and not optional to the work-process of investigative journalism.”(8)
The Court relied on a plethora of authorities from other jurisdictions and from international courts supportive of affording journalists the proper to protect sources.
Surveillance activities carried out against journalists run the risk of fundamentally undermining the source protection to which journalists are otherwise entitled. Principle 9 of the Global Principles on the Protection of Freedom of Expression and Privacy provides the following about the protection of sources:
“9.1. The right to freedom of expression implies that everyone who obtains information from confidential sources with a view to exercising a journalistic activity has, subject to Principles 9.2 (a) and (b), a duty not to disclose the identity of their confidential sources and a right not to be required to do so.
9.2. States should provide for the protection of the confidentiality of sources in their legislation and ensure that:
(a) Any restriction on the right to protection of sources complies with the three-part test under international human rights law…;
(b) The confidentiality of sources should only be lifted in exceptional circumstances and only by a court order, which complies with the requirements of a legitimate aim, necessity, and proportionality. The same protections should apply to access to journalistic material;
(c) The right not to disclose the identity of sources and the protection of journalistic material requires that the privacy and security of the communications of anyone engaged in journalistic activity, including access to their communications data and metadata, must be protected. Circumventions, such as secret surveillance or analysis of communications data not authorised by judicial authorities according to clear and narrow legal rules, must not be used to undermine source confidentiality; and
(d) Any court order under 9.2 (b) and (c) must only be granted after a fair hearing where sufficient notice has been given to the journalist in question, except in genuine emergencies.”
Further to this, the United Nations Educational, Scientific and Cultural Organization (UNESCO) has set out that a robust and comprehensive source protection framework would encompass the need to:(9)
- Recognise the value to the public interest of source protection, with its legal foundation in the right to freedom of expression (including press freedom), and to privacy. These protections should also be embedded within a country’s constitution and/or national law.
- Recognise that source protection should extend to all acts of journalism and across all platforms, services and mediums (of data storage and publication), and that it includes digital data and meta-data.
- Recognise that source protection does not entail registration or licensing of practitioners of journalism.
- Recognise the potential detrimental impact on public interest journalism, and on society, of source-related information being caught up in bulk data recording, tracking, storage and collection.
- Affirm that State and corporate actors (including third-party intermediaries), who capture journalistic digital data must treat it confidentially (also acknowledging the desirability of the storage and use of such data being consistent with the general right to privacy).
- Shield acts of journalism from targeted surveillance, data retention and handover of material connected to confidential sources.
- Define exceptions to all the above very narrowly, so as to preserve the principle of source protection as the effective norm and standard.
- Define exceptions as needing to conform to a provision of “necessity” and “proportionality” — in other words, when no alternative to disclosure is possible, when there is a greater public interest in disclosure than in protection, and when the terms and extent of disclosure still preserve confidentiality as much as possible.
- Define a transparent and independent judicial process with appeal potential for authorised exceptions, and ensure that law-enforcement agents and judicial actors are educated about the principles involved.
- Criminalise arbitrary, unauthorised and wilful violations of confidentiality of sources by third-party actors.
- Recognise that source protection laws can be strengthened by complementary whistleblower legislation.
UNESCO has further noted that there is a particular gender dimension that arises in respect of source protection in the digital age. Women journalists face additional risks in the course of their work, both on- and offline: in the physical realm, these risks include sexual harassment, physical assault and rape, which may limit their physical mobility; and in the digital sphere, acts of harassment and threats of violence are rampant.(10) Similarly, female sources face increased risks when acting as whistleblowers or confidential informants.(11) As such, women journalists need to be able to rely on secure, non-physical forms of communications with their sources, in particular secure digital communications, to be able to engage with their sources.(12)
Digital safety and security are paramount for both female journalists and sources
In 2017, UNESCO highlighted the heightened risks faced by women journalists due to the interception and analysis of journalistic communications.(13) This practice not only endangers the physical safety of women journalists and their sources but also undermines the confidentiality necessary for effective reporting. Encrypted communications and other defensive measures were noted as crucial to safeguard movements and protect the anonymity of sources. UNESCO further recorded that the risks are even greater for female whistleblowers, who rely on secure digital communication methods to minimize detection and ensure their stories reach the public and called for robust legal protections, applied with gender sensitivity, are essential to safeguard confidentiality, particularly in cases where judicial orders compel disclosure.
In 2022, the Report of the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression highlighted the disproportionate targeting of women journalists in some countries through digital surveillance, amounting to a form of gender-based violence.(14) Surveillance practices not only compromise the personal information of women journalists but also deter confidential sources from communicating, chilling whistle-blowing and investigative journalism. The extraterritorial reach of digital surveillance expands state control over expression globally, potentially stifling investigative reporting at an international level. The report recommends incorporating adequate safeguards in national laws, including judicial oversight, to ensure that digital surveillance activities uphold international standards on the protection of journalists and their sources. Additionally, it calls for holding surveillance companies accountable for the foreseeable misuse of their technology and amending sovereign immunity laws to enable civil action against states engaged in cross-border digital attacks on journalists.