On October 1, 2026, Ecuadorian agents stopped Swedish free-software developer and security expert Ola Bini in Quito and told him his visa had been revoked. According to the Electronic Frontier Foundation, a hearing that human rights organizations were denied entry to then ordered his immediate deportation and barred him from Ecuador for 10 years. The stated basis was a secret report alleging he is a threat to public security and the state structure, which his lawyers could not see. His long-running criminal case had by then lapsed under the statute of limitations.
The strongest case for the state
Governments have a real interest in controlling who stays on their territory. Immigration status is a privilege, not a right, and states rely on confidential intelligence that cannot always be shown in open court without exposing sources. International law accommodates this. Article 13 of the International Covenant on Civil and Political Rights lets a state expel a lawfully present foreigner without the usual chance to contest the decision where "compelling reasons of national security otherwise require."
If Ecuador had a genuine, specific security concern, that exception is the argument it would make. A state could reasonably say that a closed hearing and a classified report are a lawful use of a narrow carve-out.
Why the exception does not carry the weight being put on it
The carve-out is narrow. The same Article 13 requires that expulsion happen only "in pursuance of a decision reached in accordance with law." Only the right to argue against expulsion and to have the case reviewed is conditional on national-security reasons. The American Convention on Human Rights, by which Ecuador is bound, goes further. Article 22(6) says a lawfully present foreigner "may be expelled from it only pursuant to a decision reached in accordance with law," and it contains no national-security exception.
The facts reported so far show strain on both tests. Bini was reportedly told his visa was revoked without any documentation. The accusation rests on a report that neither he nor his counsel could examine. Human rights groups were excluded from the hearing. A security exception that applies on the state's say-so, with no evidence ever tested, ceases to be an exception and becomes the rule.
The sequence matters too. According to EFF, precautionary measures in the criminal case were formally lifted before the deportation order, and the statute of limitations had expired. The criminal route to dealing with Bini had closed. An administrative route, with a lower standard of proof and less scrutiny, then opened. When a state moves to the lower-scrutiny route only after the higher-scrutiny one fails, that is a signal worth taking seriously.
A pattern, not an isolated event
Bini was detained at Quito airport on April 11, 2019, the day the interior minister held a press conference about alleged Russian hackers and WikiLeaks affiliates in Ecuador, per the Free Ola Bini timeline. A habeas corpus hearing on June 20, 2019 ruled that detention "illegitimate, arbitrary and illegal." A 2023 trial court decision acquitted him, and the Inter-American Commission's Special Rapporteur for Freedom of Expression welcomed it. EFF reports that an appeals court later convicted him of attempted unauthorized telecommunications access "without actual evidence."
EFF's 2019 reporting described prosecutors changing the charges at the last moment and resting them on his accessing an open, publicly available telnet service. His defense documented 65 due process violations. Amnesty International warned that prosecuting people like him creates an intimidating environment for others doing similar work. EFF's own delegation concluded it was a political case rather than a criminal one.
What this means for security research
The wider issue is not one man's visa. Security research routinely involves probing publicly reachable systems to find weaknesses, and a legal regime that treats that as a crime, or as a state-security threat, pushes researchers out and leaves systems less secure. Countries that want a healthy digital economy need researchers to be able to report vulnerabilities without fear of prosecution, and without fear of an opaque administrative penalty once prosecution fails.
The proportionate answer is not to deny states any tools. It is to require that any national-security expulsion meet a minimum standard:
- A written decision that identifies the legal basis and the factual allegations at a level the person can answer, even if some sources are redacted.
- Independent review, with a security-cleared lawyer or special advocate seeing the confidential material when the person cannot.
- Public access to the hearing, or at least to its outcome and reasoning, so that civil society can check the process.
- A ban on using expulsion to reach a result that a court, or a lapsed limitation period, has already foreclosed.
None of these prevents a state from removing a real threat. They only prevent the label of "threat" from standing in for proof.
The open questions
Several facts remain unverified. The content of the secret report is unknown. We do not yet know whether the Ecuadorian courts will hear the habeas corpus petition that EFF says Bini's defense filed, or whether Bini has left the country. Ecuador's government could resolve much of this by releasing a redacted summary of the allegations. Until it does, the reasonable inference from what is public is that the case was not resolved on evidence.
For a country that signed both treaties cited above, the standard is clear. A person lawfully resident is entitled to a decision in accordance with law. A secret report that the subject cannot see, produced after a criminal case lapsed, is hard to square with that promise.