Are Public WiFi Operators Solving a Social Problem or Creating a Legal One? Examining Uganda's UCC Crackdown, Telecommunications Licensing, Internet Access, Consumer Protection, and Regulatory Reform

Note: Written 9 July 2026, days after UCC's notice. Three weeks later, UCC quietly suspended its own enforcement. The argument below explains why it had no real choice.

What happened

On 7 July 2026, the Uganda Communications Commission issued a public notice directing all unlicensed public WiFi providers to cease operations or face enforcement action under the Uganda Communications Act, 2013. The notice identified three concerns: that unlicensed operators compromise consumer protection, that they pose cybersecurity risks, and that they undermine accountability within the telecommunications sector. The stated legal basis is s.22 of the Act, which prohibits any person from providing telecommunications services without a licence issued by the Commission. The notice applies nationwide and draws no distinction based on the size or nature of the operation.^[1]

The notice raises a fair legal question. But before considering what the law requires, it is worth understanding what this business actually looks like on the ground, because the enforcement response assumes a problem that the facts do not support.

How the business actually works

An operator does not sneak onto the network. The process is straightforward. The operator identifies a site, a market, a residential compound, a small estate, and speaks to the owner or caretaker, sometimes paying rent or electricity, sometimes offering free internet in exchange for space.

The operator then places an order with a licensed telecom, usually MTN or Airtel, who sends a technician to survey the site and install a router connected to the telecom's own fibre infrastructure, on a proper unlimited bundle that can cost 110,000 shillings a month or more.^[2] The operator buys equipment to split and manage that connection, pays someone to set it up, and sells access through vouchers, extending the signal to whoever needs it with additional routers and cables, all purchased and paid for. A typical site serves around 25 people.

I believe you need to read that again: the licensed telecom installs the connection, sells the bundle, and receives payment every month. The operator that UCC's notice describes as unlicensed is in fact a paying customer of a licensed network. The operator bought a large bundle and is sharing it with neighbours at a price those neighbours can actually afford.

There is a further detail that demonstrates how fully embedded this activity is within the formal financial system. Many customers pay for their daily voucher using mobile money, MTN Mobile Money or Airtel Money, and both networks charge approximately 110 shillings on every 1,000-shilling transaction.

A customer paying 1,000 shillings for a day of WiFi actually sends 1,110 shillings, and the operator receives approximately 900 after fees. Some operators also use online voucher platforms that take a further small commission for managing sales and records remotely.^[3] 

The same companies whose infrastructure and payment systems sustain this market are earning from it at two points: once on the bundle sale and again on every mobile money payment that keeps the operation running. Is that evidence of an underground market operating outside the system, or is it evidence that the operators, their suppliers, and their customers are all transacting through fully licensed, traceable channels?

Why this market exists

The economics explain the rest. A licensed operator currently sells 165 megabytes(mb) for 1,000 shillings.^[4] In an economy where a significant proportion of earners take home between 200,000 and 300,000 shillings a month,^[5] that product is priced beyond the reach of the majority of the market. At 165 mbs, the data is used up within an hour of ordinary use, insufficient for TikTok, WhatsApp, video calls, or sustained professional work. Meanwhile, a single router and one bulk bundle can turn that same 1,000 shillings into unlimited WiFi for a full day, sufficient for any ordinary purpose.^[6]

The formal market cannot compete with that value proposition, not because informal operators are cutting corners on safety, but because the formal market's pricing structure was never designed to serve a consumer earning 200,000 shillings a month. According to GSMA Africa, more than 70 per cent of Ugandans remain offline despite network coverage reaching approximately 96 per cent of the population, which suggests that affordability, not infrastructure, is the primary barrier to internet access.^[7]

UCC itself has acknowledged this. In June 2026, UCC's Director of Economic Regulation, Content and Consumer Affairs, Julianne Mweheire, told the Daily Monitor:

“We're not going to stop consumers from accessing services.”^[8] 

She went further, declining to characterise the model as illegal on the basis that consumers had paid for a real service, and argued that consumers had built their own solutions because licensed operators were not responding to what people actually wanted: unlimited, speed-based access instead of volume-based bundles that expire before they deliver meaningful connectivity.^[9] It is relevant context, though not an allegation of any kind, that Mweheire worked at MTN Uganda for close to 18 years, most recently in carrier relations, before joining UCC in 2018.^[10]

Three weeks after those comments, UCC's enforcement notice reversed the framing entirely, casting the same operators as threats to consumer safety and critical infrastructure.^[11] Two positions from the same regulator, separated by three weeks, cannot both be correct. The Commission has not explained the basis for the reversal, and any operator facing enforcement is entitled to ask which position represents UCC's view.

Not even the law is on UCC's side

Section 22 of the Uganda Communications Act, 2013 provides that “a person shall not, establish a telecommunications station, provide telecommunications services or construct, maintain or operate telecommunications apparatus without a licence issued by the Commission.”^[12] That language is absolute. It draws no distinction between a national mobile network operator and a single person splitting a fibre connection with 25 neighbours through a home router. Both are, on the face of the statute, providing a telecommunications service without a licence.

Section 78, titled “Offences and penalties for unlicensed persons,” makes it a criminal offence to establish, install, maintain, provide, or operate a telecommunications system or service without authorisation.^[13] The default penalty under s.85 for offences without a specified sentence is a fine of up to ninety-six currency points, equivalent to UGX 1,920,000, and if the offence continues, a further fine of up to 15 currency points (UGX 300,000) for every additional day, or imprisonment of up to four years, or both.^[14] That maximum fine represents roughly six to ten months of income for the operators running these hotspots.

The licensing framework UCC administers offers no category that fits a small-scale resale operation. The current categories: National Telecom Operator, National or Regional Public Service Provider, National or Regional Public Infrastructure Provider, and Communal Access, all require the applicant to demonstrate financial and technical capacity to establish and operate telecommunications infrastructure at scale.^[15] 

Even the lowest-tier regional licence has historically carried fees in the range of USD 10,000 per year, a figure that prompted Uganda's own Internet Service Providers Association to challenge UCC in court.^[16] There is no neighbourhood hotspot tier. There is no registered reseller category. The Act does not empower UCC to create one without regulatory amendment, and UCC has not proposed one.

The result is a binary: obtain a full licence or shut down. For an operator earning a few hundred thousand shillings a month from a single router, neither option is viable. UCC is not acting outside the law. It is acting within a law that was never written with this activity in mind, and the absence of a proportionate licensing category means that enforcement, if carried through, will criminalise the exact economic behaviour its own director described three weeks earlier as a legitimate response to market failure.

UCC's concerns are worth taking seriously

The enforcement notice raises three concerns, consumer protection, cybersecurity, and accountability, and those concerns deserve a serious response rather than dismissal.

On consumer protection, the argument would be that an unlicensed operator is not subject to the quality-of-service standards, complaint-resolution obligations, and pricing transparency requirements that licensed operators must meet. A consumer purchasing a voucher from an informal operator has no regulatory recourse if the service is interrupted, the speed is misrepresented, or the operator simply disappears. That is a real gap, and it is worth acknowledging.

On cybersecurity, the concern is that unmanaged network equipment, improperly configured routers, and the absence of traffic monitoring create vulnerabilities that could be exploited for data interception, fraud, or other criminal activity. A shared WiFi network with no access controls and no logging does present a different risk profile from a licensed operator's managed infrastructure.

On accountability, the argument is that licensed operators can be identified, investigated, and sanctioned. An unlicensed operator operating through an unregistered business, with no fixed address and no regulatory relationship, cannot. If the connection is used for criminal purposes, there is no audit trail leading back to the person who provided the access.

These are legitimate regulatory concerns. But none of them supports the conclusion that the appropriate response is a blanket enforcement action. Each of these concerns can be addressed through a registration and minimum-standards framework that brings operators into the regulatory system without requiring them to meet capital and infrastructure requirements designed for national network operators.

Consumer protection is achieved by requiring the operator to register, display contact information, and adhere to basic service commitments. Cybersecurity is addressed by mandating minimum router configuration standards and basic access logging. Accountability is established the moment the operator registers and provides verifiable identification. Enforcement without any pathway to compliance does not solve any of these problems. It simply removes the service and the income it generates.

The market structure behind the regulation

It is also necessary to consider what a licensing regime built around capital-intensive infrastructure requirements does to market structure, regardless of intent. The two largest operators, MTN and Airtel, control the large majority of Uganda's telecom market.^[17] Smaller challengers have not fared well: Africell entered in 2014, invested heavily, and exited in 2021, having never achieved the scale necessary to compete against that dominance.^[18]

This does not require a conspiracy theory to explain. A licensing framework that requires demonstration of financial and technical capacity to operate infrastructure at scale will, by structural operation, favour the ones who already possess that infrastructure. It does not need to be designed as a barrier to function as one. The question is not whether UCC intends to protect MTN or Airtel, but whether the absence of a proportionate licensing category for small-scale resale has that effect, and whether enforcement of the existing framework will deepen it.

One of the responses to youth unemployment

The people running these hotspots are, overwhelmingly, young and either unemployed or underemployed. They identified a gap the formal economy left open and built a functioning micro-business to fill it, the same pattern of informal economic activity that characterises much of Uganda's urban economy; mobile money agents, boda bodas on every street. Enforcement without a transition path does not only shut down a WiFi router. It removes one of the few income streams a generation facing acute unemployment has managed to build for itself.

The consumers who depend on these services are in the same position. For a worker earning 200,000 to 300,000 shillings a month, the choice between 165 megabytes from a licensed operator and unlimited daily access from a neighbourhood hotspot is not a choice between a regulated service and an unregulated one. It is in fact a choice between being online and being offline. Removing the informal option without addressing the affordability gap that created demand for it returns those consumers to the position they were in before: covered by network infrastructure they cannot afford to use.

There's a proportionate alternative

If UCC's concerns about consumer protection, cybersecurity, and accountability are genuine, the Commission should be able to design a framework that addresses those concerns without requiring small operators to meet the financial and technical thresholds of a national infrastructure licence. The following elements would achieve that objective.

A registered reseller or neighbourhood operator category, created by regulatory instrument under the Act, requiring the operator to register with UCC, provide verified identification, and specify the location and scale of the operation. The registration fee should be scaled to the income profile of the operators it targets.

A fee in the range of UGX 50,000 to 200,000 per year, roughly the cost of one to two months of the underlying bundle, would be proportionate and would not constitute a barrier to entry.

Minimum technical standards, prescribed by regulation, covering basic router security configuration, password protection on shared networks, and elementary access logging sufficient to support law enforcement enquiries. These standards should be achievable with consumer-grade equipment and should not require enterprise-level infrastructure.

A transition period of not less than six months, during which existing operators may register without penalty, giving UCC and the operators time to build the administrative systems necessary for a functioning registration regime.

A requirement that licensed telecoms cooperate with the framework, including by identifying and notifying bulk-bundle customers who may be operating resale businesses, and by providing those customers with information about the registration process. Since the licensed telecoms already know who these customers are, they installed the connections and collect payment every month, this cooperation costs nothing and ensures comprehensive coverage.

Clear enforcement thresholds distinguishing between a registered operator who fails to meet a specific standard, which should attract a compliance notice and a reasonable cure period, and an unregistered operator who refuses to register after the transition period, which may attract enforcement. The current binary, full licence or criminal prosecution, is not proportionate to the activity it targets and will not survive scrutiny if challenged on constitutional grounds.

Conclusion

UCC's enforcement notice identifies real concerns. Unlicensed operators do fall outside the current regulatory framework, and the absence of registration, minimum standards, and accountability mechanisms is a legitimate gap. But the response the notice proposes- blanket enforcement under a licensing regime that offers no proportionate category for the activity in question- does not close the gap. It eliminates the service entirely, together with the income it generates and the connectivity it provides, without addressing the affordability failure that created demand for it.

Cutting off the workaround does not fix the underlying shortage it emerged to solve. It restores the shortage and removes the income that came with addressing it. The Commission has the regulatory tools to design a proportionate framework. Its own director has publicly acknowledged that the market these operators serve is real and that the formal sector has failed to reach it. Therefore, the question is not whether UCC has the legal authority to enforce. It plainly does. The question is whether enforcement, without a pathway to compliance that these operators can actually meet, is a responsible exercise of that authority.

Postscript, 2 August 2026

On 17 July, UCC suspended enforcement action against unlicensed hotspot operators, following a meeting between UCC Executive Director Nyombi Thembo and the Alliance of Hotspot Operators Uganda (AHOU). Thembo directed UCC teams to halt enforcement during a consultation period, describing it as time to “engage, learn, and co-create a realistic path to compliance.” The 7 July notice has not been withdrawn and remains formally in force. UCC has since launched a technical study, with AHOU members working alongside UCC engineers on network architecture and billing systems, to inform future regulation. No fee schedule, licensing category, or timeline has been published.

The suspension does not resolve the argument made above. It defers it. Enforcement is paused by administrative directive, not by any change to the law or the licensing framework, and could in principle resume without further notice. The absence of a proportionate compliance pathway; the central problem this piece identifies, remains unaddressed five weeks on. Whether the AHOU consultations produce one is, at the time of writing, still an open question.

By Mutungi Owen Mark

owenmarkm123@gmail.com

[1] The UCC public notice is dated Monday, 7 July 2026. Multiple outlets reported the notice. See 'UCC Announces Crackdown on Unlicensed Public Wi-Fi Providers' (PlusNews Uganda, July 2026); 'No More Black Market Internet! UCC Hunts Illegal Internet Providers' (Red Pepper Uganda, July 2026).

[2] MTN Uganda's WakaNet 4G home broadband packages start at UGX 55,000/month; fibre packages begin at UGX 130,000/month for 60Mbps. See 'MTN Uganda Elevates WakaNet Home Broadband with New Pricing, Faster Speeds and Enhanced Services' (TechAfricaNews, 4 November 2024). MTN Uganda has also advertised unlimited fibre at UGX 99,000/month for 100Mbps and UGX 129,000/month for 200Mbps. See MTN Uganda (@mtnug), post on X (undated; offer valid until 30 November 2025).

[3] Some operators also use online voucher platforms that take a further small commission for managing sales and records remotely. See eg Hotspot.ug; Webtune Technologies (webtunetech.click).

[4] SmartSMSSolutions, 'MTN Uganda Data Plans for UGX 500, UGX 1000, and UGX 2000 in 2025', listing the UGX 1,000 daily plan at approximately 165MB.

[5] The median monthly income in Uganda is estimated at UGX 300,000. The formal sector, which accounts for roughly 15 per cent of employment, reports an average gross salary of approximately UGX 1,500,000/month, but most Ugandans work in subsistence agriculture or the informal sector at much lower effective incomes. See Wage.is, 'Average Salary in Uganda' (2026). Average wages for low-skilled workers are separately estimated at UGX 412,400/month. See WageIndicator Foundation data, reported at Take-profit.org, 'Uganda Wages Low Skilled 2026'.

[6] Optimum, a Ugandan ISP, advertises 'Internet access starting at UGX 1000 per day' with unlimited access. See Optimum.ug ('Affordable Internet for All Ugandans').

[7] According to GSMA Africa, more than 70 per cent of Ugandans remain offline despite network coverage reaching approximately 96 per cent of the population. See Daily Monitor article cited at n 8.

[8] 'UCC backs Shs1,000 Wi-Fi hotspot economy, tells telecoms to innovate' Daily Monitor (Uganda, published circa 13 June 2026).

[9] Mweheire told the Daily Monitor that consumers preferred 'unlimited, speed-based internet access over conventional volume-based bundles that expire once purchased data is exhausted.' In the same article, Mweheire is quoted from a May 2026 phone interview: 'I'm not going to call it illegal because somebody has actually paid for it and it's a non-illegal service.'

[10] Commsrisk reports that Mweheire 'joined the UCC in August 2018 after leaving MTN Uganda, where she worked for almost 18 years.' See 'Julianne Mweheire, Uganda Communications Commission' (Commsrisk, undated profile). UCC's own website describes her as having 'over 13 years of work experience in the telecommunications sector having worked with MTN Uganda.' See Uganda Communications Commission, Staff Profile: Julianne R Mweheire. Her most recent role at MTN was Senior Manager, Carrier Relations. See 'Julianne Mweheire Replaces Twinemanzi at UCC' (ChimpReports, 2018).

[11] The Mweheire comments were published approximately 13 June 2026. The enforcement notice is dated 7 July 2026. Multiple outlets noted the apparent contradiction between the two positions.

[12] Uganda Communications Act, 2013, s 22 ('Licence for telecommunications'). The provision is reproduced on UCC's own licensing page: see Uganda Communications Commission, 'Telecommunication Licensing'.

[13] Uganda Communications Act, 2013, s 78 ('Offences and penalties for unlicensed persons'). The section provides that any person who 'establishes, installs, maintains, provides or operates' (a) a radio communication station, (b) a telecommunications system or service, or (c) a postal service, without a licence, commits an offence.

[14] Uganda Communications Act, 2013, s 85. The default penalty for offences under the Act without an expressly provided penalty is 'a fine not exceeding ninety six currency points or imprisonment not exceeding four years or both.' Under Ugandan law, one currency point equals UGX 20,000. See Law Revision (Fines and Other Financial Amounts in Criminal Matters) Act. Ninety-six currency points therefore equals UGX 1,920,000.

[15] See UCC, 'Approved New Telecommunications License Categories' (January 2020), published at uccinfoblog.com; UCC, 'Description of Telecom Licenses and Authorisations'. The six categories are: National Telecom Operator (NTO), National Public Service Provider (NPSP), Regional Public Service Provider (RPSP), National Public Infrastructure Provider (NPIP), Regional Public Infrastructure Provider (RPIP), and Communal Access. All require demonstrated financial and technical capacity.

[16] In 2017, UCC gazetted a licensing framework listing a public infrastructure provider licence at USD 30,000 and a regional public service provider licence at USD 10,000 per year. The Internet Service Providers Association of Uganda (ISPAU) challenged these fees by way of judicial review at the High Court in Kampala, and UCC subsequently agreed to reduce them. See 'UCC cuts licence fees for internet providers' New Vision (Uganda).

[17] By 2016, MTN and Airtel controlled over 95 per cent of Uganda's mobile subscriptions and more than 34 million accounts. See 'Telecom duopoly stifling new entrants' Daily Monitor (Uganda, 2025). Both operators continued to post double-digit revenue growth through 2025. See '2025 financial results: Comparing MTN & Airtel Uganda revenue, profits, other key figures' (Pulse Uganda, 14 March 2026).

[18] Africell entered Uganda in 2014 by acquiring the local operations of Orange Uganda. It ceased all network services on 7 October 2021, citing inability to compete at scale. At exit, its market share had fallen to approximately 5 per cent, down from roughly 7 per cent at end-2019. See 'Africell is shutting its Ugandan business' (Connecting Africa, 2021); 'Africell Group Uganda Timeline and Farewell — 2014–2021' (PC Tech Magazine, October 2021).