🇺🇬
Uganda
Data Protection and Privacy Act, 2019
Africa🔵 Substantial
Compliance Score
57%
8 Addressed
4 Partial
2 None
Authority
Personal Data Protection Office (PDPO)
Overview
Uganda's Data Protection and Privacy Act, 2019 regulates the collection and processing of personal data and provides rights to individuals. The PDPO administers registration and compliance functions.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Uganda?+
Uganda is governed by the Data Protection and Privacy Act, 2019. The law is enforced by the Personal Data Protection Office (PDPO). According to our analysis, the country has a Substantial level of data protection framework.
Does Uganda require a Data Protection Officer (DPO)?+
Yes, under the Data Protection and Privacy Act, 2019, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Uganda?+
Partially. While Data Protection and Privacy Act, 2019 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Uganda?+
Under the Data Protection and Privacy Act, 2019, organizations must notify the Personal Data Protection Office (PDPO) and affected individuals without undue delay in the event of a personal data breach.