Uganda’s Data Protection and Privacy Act 2019 commences today, having received assent on 25 February 2019. It protects the privacy of individuals and regulates the collection and processing of personal data.
Key points
- Applies to persons collecting or processing personal data in Uganda, or the personal data of Ugandan citizens.
- Controllers and processors will need to register with a Personal Data Protection Office.
- Organisations must put security safeguards in place and notify breaches to the regulator immediately.
- Processing and storage of personal data outside Uganda is restricted.
- Offences under the Act carry fines and possible imprisonment.
The Act’s reach extends to data about Ugandan citizens wherever it is processed. UK organisations with Ugandan customers, staff or partners should consider registration and whether data hosted outside Uganda meets the Act’s conditions.
Source: Uganda Data Protection and Privacy Act 2019 (Parliament of Uganda)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
