What does the Data Protection and Privacy Act cover in Uganda?
In brief
The Data Protection and Privacy Act applies to anyone who collects or processes personal data. It requires data to be processed lawfully and for a specified purpose, kept secure and accurate, and not held longer than needed. Individuals have rights to access and correct their data, and can complain to the Personal Data Protection Office, which oversees compliance. Collectors, controllers and processors may need to register.
A little more detail
If you run a business that holds customer or staff data, the Act likely applies to you — start with a data-protection compliance review.
What to do next
See the data-protection compliance checklist and the privacy-notice template.
The law
- Data Protection and Privacy Act, Cap. 97 (2023 Revision).
Quick guide · Data & consumer.
Actively maintained.
Last reviewed 9 June 2026; next review due 9 June 2027.
This resource is a practitioner orientation and general information, not legal advice, and does not create an advocate–client relationship. It is AI-generated. Ugandan law changes and chapter and section numbers were revised in the 2023 Laws of Uganda. Verify every statute, rule, form, fee and authority against the current primary source — and the specific facts of your matter — before relying on it.