f. Arbitrary or Unlawful Interference with Privacy, Family, Home, or Correspondence
The constitution states that “reputation, life, property, [and] dwelling[s]” are protected from trespass, except as “provided by law.” The government routinely infringed on this right. Security forces monitored the social activities of citizens, entered homes, offices, and places of worship, monitored telephone conversations and internet communications, and opened mail without court authorization. The government also routinely intimidated activists and government critics by detaining their family members as a form of reprisal.
On July 13, authorities arrested Manouchehr Bakhtiari for a second time related to activism on behalf of his son, Pouya, killed by security forces in the city of Karaj during the November 2019 demonstrations. The government previously detained 10 other members of Pouya Bakhtiari’s family, including his 11-year-old nephew and two of his elderly grandparents, to prevent them from holding a traditional memorial service for Bakhtiari 40 days after his death. According to media reports, in December Manouchehr Bakhtiari was released on bail.
According to international human rights organizations, the Ministry of Intelligence arrested and intimidated BBC employees’ family members, including elderly family members, based in Iran. The government also froze and seized assets of family members, demoted relatives employed by state-affiliated organizations, and confiscated passports. The government also compelled family members of journalists from other media outlets abroad to defame their relatives on state television.
On July 16, a revolutionary court in Tehran sentenced Alireza Alinejad, brother of expatriate activist Masih Alinejad, to eight years in prison for “national security” crimes, and for insulting the supreme leader and “propaganda against the regime.”
On August 17, security officials detained and questioned human rights attorney Nasrin Sotoudeh’s daughter, Mehraveh, on unspecified charges, according to CHRI. She was later released on bail.
There are currently no comprehensive data-protection laws in place in the country, therefore there are no legal safeguards for users to protect their data from misuse. The online sphere is heavily monitored by the state despite Article 37 of the nonbinding Citizens’ Rights Charter, which states that online privacy should be respected.
The operation of domestic messaging apps is based inside the country, leaving content shared on these apps more susceptible to government control and surveillance. Lack of data protection and privacy laws also mean there are no legal instruments providing protections against the misuse of apps data by authorities.
In January, Certfa Lab reported a series of phishing attacks from an Iranian hacker group known as Charming Kitten, which was allegedly affiliated with Iran’s intelligence services. According to the report, the phishing attacks targeted journalists as well as political and human rights activists.
In March, Google removed a COVID-19 app known as AC19 from the Google Play store. No official reason was provided concerning the app’s removal, although Iranian users raised concerns regarding the app’s security, in light of its collection of geolocation data, and a lack of transparency from the government as to why the data were being collected and how it was being used.
In March, Comparitech reported that data from 42 million Iranian Telegram accounts were leaked online. Telegram released a statement alleging the data came from the two unofficial Telegram apps Hotgram and Telegram Talaei, which became popular after the platform’s ban in the country. There were reports the two client apps have ties to the government and Iranian hacker group Charming Kitten.