Since the tragic death of Mahsa Jhina Amini in September 2022 and the ensuing protests, access to the internet in Iran has been in a state of near-constant crisis. At the height of violent crackdowns against protests, further internet restrictions were also introduced. Measures such as digital curfews, localized shutdowns, the blocking of platforms such as WhatsApp, Instagram, the blocking of app stores, and attacks on access to VPNs marked the country’s transition to its most restricted internet in its history.
The immediate impacts of these restrictions on the rights and freedoms of those inside Iran are well-documented. In the long-term, Iranian authorities are also leveraging this crisis to set in motion further plans for an authoritarian internet. We have seen similar patterns in the past, such as the measures introduced during and since the 2009 protests to intensify internet censorship, and the use of a nationwide internet shutdown to suppress massive protests in November 2019, and the testing of the National Information Network (NIN).
This time, the authorities are making a slow but steady move towards rolling out plans for digital segregation or, as Filterwatch has referred to it, “layered” or “tiered” filtering. In practice, this plan means that specific groups will be given preferential access to the internet and international services, as determined by the government, allowing for a massive expansion of the state’s powers in controlling internet access and surveillance, and posing major new threats to digital rights in Iran in the medium to long term.
Layered filtering presents a solution to one of Iran’s biggest internet policy dilemmas: maintaining pervasive internet restrictions while preserving the economic and other benefits which require access to the global internet. Amid the sustained intensified internet restrictions and an outpouring of reports on the high financial burden of internet disruptions to businesses, layered filtering has been catapulted into action. Iran’s ICT Minister, Eisa Zarepour has already made recent announcements on preferential access to international and blocked content being granted to freelancers, developers, teachers and academics in a collaboration between the ICT Ministry and the Science, Research and Innovation Ministry.
In contrast, the majority of those in Iran will be limited to domestic services such as messaging apps, social media networks, and other services available via the NIN, which have been receiving renewed government support, and allegedly experienced a boost in users though these figures are difficult to verify.
There are still several unknowns about Iran’s readiness for the wider rollout of layered filtering, and it will take some time for its different components to come together for its full operationalization, nonetheless, as it will be detailed below, the move towards digital segregation will intensify threats to digital rights in Iran.
Layered filtering could reduce the cost of internet restrictions and shutdowns in the short to medium term, but also in the long term, this could enable Iran to reduce its need for internet shutdowns as it shifts its focus to using more granular internet controls. As a result, privacy and security concerns will become even more prominent as people are forced to rely on domestic apps and services which offer weaker privacy and security measures, and as Iranian authorities seek to gain greater control over internet access, we could witness further crackdowns on safe circumvention tools. In tandem with the expansion of the state’s power over the internet, freedoms of expression and association will erode further.
Another reason why layered filtering is significant is that it is emblematic of the development of internet control policies in Iran. The history of layered filtering should remind us that Iran’s most vague, ambitious, and even seemingly self-sabotaging internet policies should be taken seriously in order to fully understand the challenges that lie ahead, and to develop plans to resist them.
An Internet For the Few: A History of Layered Filtering Plans
Some of the earliest indications towards layered filtering can be traced to Iran’s former ICT Minister, Mohammad-Javad Azari Jahromi who served under the former Iranian President Hassan Rouhani. In September 2019, Jahromi attended a session in Majles (parliament) on his performance, where he remarked that the “problem with Iranian filtering” was that it imposed blanket restrictions on all those inside Iran, emphasizing that certain professions and students should not be subject to the same level of internet restrictions as the general population. Beyond these comments from Jahromi, and the current ICT Minister’s denial of its existence, there is no publicly available official documentation that explicitly refers to layered filtering. Despite this lack of transparency, layered filtering has been in practice already in several ways.
Many Iranian officials and politicians, MPs, Ministers (Jahromi himself was an avid Twitter user) the President, and even the Supreme Leader are present and active on blocked platforms such as Twitter, and the since blocked Instagram, a clear sign of the hierarchical and discriminatory internet access in the country. Though it could be said that they are relying on VPNs and similar methods to ordinary Iranians, in a 2021 interview the then MP and Jahromi critic Hamideh Zarabadi, commented that “many officials have unrestricted access to the internet” and can “use blocked platforms such as Twitter and Telegram” without consequence.
Also during Jahromi’s time as ICT Minister, an internet scheme for journalists was introduced where those approved by the Ministry of Culture would receive unfiltered internet access via ICT Ministry. Evidence of this emerged during the November 2019 nationwide internet shutdown where some journalists were able to use Twitter during that time.
Though this scheme has not been publicized to the same extent under the current government, the Iranian news outlet Shargh Daily reported that around 160 journalists approved by the Ministry for Culture have been to be given access to the scheme following the continued internet shutdowns and disruptions since September 2022. Shargh Daily also reported that while this allows access to certain content and platforms, it is still subject to some limitations and controls. Due to a lack of transparency, it is difficult to verify who, and how many journalists have preferential access to the internet and how exactly it operates.
Following the announcements from Zarepour on special internet access for freelancers and programmers, other groups have followed suit in the past few months. Already, there have been reports from news outlets inside the country that members of Iran’s Chamber of Commerce and Tehran’s ICT Union were some of first to allegedly receive “unfiltered” internet. Other government bodies and organizations have attempted to gain similar, preferential access to the internet. Various organizations and professional bodies such as medical associations, Ministry for Agriculture, Iran’s Football Federation, have been circulating letters on social media asking for “unfiltered access to the internet” from the ICT Ministry, indicating an acceptance of this system as the new norm instead of relenting on the internet restrictions both old and recent.
But these developments have not been without backlash. This February, Zarepour announced plans to offer a special SIM card for tourists that would provide them with unrestricted access to the internet. This time, the disregard for the conditions of the people living in Iran, who have endured months of heightened internet restrictions and faced violence at the hands of government forces, was so clear that the ICT Minister backtracked his comments in the face of major uproar. Opposition has also come from Iran’s IT sector, with Tehran’s ICT Guild rejecting layered filtering as a viable alternative to removing the internet restrictions in Iran.
The Role of the National Information Network
Under the eight years of the Rouhani administration, we witnessed major investment and planning into Iran’s localized internet, known as the National Information Network (NIN). Domestic content, services, and platforms provide alternatives to the blocked international versions and using localized infrastructure, which can at times allow users to remain online (domestically) during a shutdown to reduce disruption to economic activities.
The existence of the NIN not only simplifies and, to an extent, is meant to reduce the cost of internet shutdowns, it is also vital for the realization of layered filtering. As more and more international services are blocked, people will need alternatives to continue their daily digital activities and eventually, many inside the country will be limited to these services.
Confronted with pervasive internet restrictions in recent months, many have had no choice but to rely on these often insecure or government backed domestic platforms to maintain business and other online activities. Since the start of the protests, officials have reported an increased number of users on domestic messaging and social media platforms, especially in light of the blocking of Instagram and WhatsApp. The Telecommunication Company of Iran (TCI) also reported an increase in the use of domestic internet traffic, and a drop in international traffic.
Though accurate figures on the use of domestic platforms and content are difficult to obtain, it would not come as a surprise if these services have experienced growth in user numbers in light of intense internet restrictions and shutdowns. Coupled with policies such as cheaper domestic internet traffic and other incentives are designed to increase the number of users on these platforms, which have a track record of violating user privacy, offer weaker security protections, and can increase the risk of surveillance and data misuse.
The Fate of VPNs – A New Plan for Crackdowns
Legal VPNs have been on the policy agenda for several years, including under both Ahmadinejad and Rouhani’s administrations. Filterwatch has already written about the long history of planning for the rollout of these VPNs over the past few years. In April 2020, the then Secretary to the Supreme Council for Cyberspace (SCC) Abolhassan Firouzabadi announced that a regulatory guidance for “Legal VPNs” had been finalized by the Committee for Determining Instances of Criminal Content (CDICC) adding that the ICT Ministry would be in charge of deciding who would have access to legal VPNs. Though the scheme never materialized under Rouhani, the subject is set high on Zarepour’s internet policy agenda.
For years the Iranian government has attempted to control the sale and use of VPNs in the country. The legal status of VPNs in Iran remains somewhat vague, currently under the Computer Crimes Law 2009/2010, the sale and distribution of VPNs is banned.
Zarepour’s comments on 19 October confirmed this position. On this day Zarepour spoke to journalists about VPNs and commented that “the use and sale of VPNs in the country is prohibited, but unfortunately it has not been criminalized,” adding that plans were being made to enforce the criminalization of VPNs. As his comments suggesting crackdowns on VPN use quickly gained widespread attention online, a correction by the ICT Ministry followed: only the sale of VPNs would be criminalized, and not their use.
Following Zarepour’s comments on the crackdown on the sale of VPNs, it was announced that the ICT Ministry is responsible for identifying and blocking unauthorized VPNs and those behind them, while the Judiciary is responsible for related prosecutions. Those charged for such ‘crimes’ will receive a penalty in accordance with Article 753 of the Islamic Penal Code which is dedicated to those who “commit computer-related crimes” which includes financial penalties and imprisonment.
The timing of this announcement of a stricter crackdown on VPN sales and the progress of layered filtering do not seem coincidental. Currently, those inside Iran are more reliant on VPNs than ever, with the blocking of WhatsApp, Instagram, and numerous other platforms. Since the start of the protests in September 2022. The blocking of major app stores such as the Google Play Store and the Apple App Store were short term measures to crackdown against VPNs at the start of the protests, but the long-term crackdowns such as criminalization efforts suggest an urgency in even more measures to bring the VPN market under control.
Crackdowns on VPN use inside Iran is a step that needs to be taken concurrently with the operationalization of the layered filtering. The hacktivist group Anonymous released a series of files and videos which expose what appears to be a prototype website for legal VPNs. A video shows the different functions on a website called VPN.ir including necessary steps to apply for a legal VPN. Other exposed files suggest that the Committee for Determining Instances of Criminal Content (CDICC) is meant to have oversight over these VPNs to ensure that they are not used beyond their permitted purpose. Though the leaked files are not definitive sources, it provides some insight into how the Iranian authorities might envision the rollout of this plan.
An Internet For the Rest: The Threats to Digital Rights
We are now witnessing the normalization of heavily throttled internet speeds, and unprecedented restrictions to the international internet in Iran. As mentioned, domestic messaging apps are reporting noteworthy user growth and will likely continue to increase in popularity given the lack of viable alternatives. Despite the ICT Minister making great effort to reject layered filtering, we are seeing layered filtering unfold almost in real time.
Meanwhile, those inside Iran, such as various internet and ecommerce related representative bodies, activists, and journalists have publicly expressed opposition to the scheme and the extensive internet restrictions currently in place. This is despite widespread arrests, detentions, and intimidation of activists by government authorities in recent months, they are making it clear that this plan should be accepted as a viable alternative for removing Iran’s internet restrictions.
It may still take some time for this plan to be fully implemented for the wider public, making it especially important for the international community to take the threats of digital segregation seriously now, as it sets to create more channels for surveillance and further threats to the rights to freedom of expression, association, and privacy. It is now more vital than ever to monitor the developments around this topic to gain a clearer understanding of how this plan will evolve and fully assess its threats to those inside Iran in order to resist them.
As Iran’s latest pathway to digital authoritarianism becomes clear, it is also important to keep in mind the lessons that can be drawn from the evolution of layered filtering and digital segregation policies: a serious reminder not to underestimate the plans of the Iranian state for the oppression of its people no matter how impossible or paradoxical they may seem.