East Africa / Uganda
AvailableUganda's privacy framework. Connected to your programme.
Data Protection and Privacy Act, 2019
Turn local requirements into assigned work, linked records and evidence you can review.
Uganda · in hlola
The framework at a glance.
Uganda's data protection law, enforced by the Personal Data Protection Office.
- Country
- Uganda
- Primary legislation
- Data Protection and Privacy Act, 2019
- Statutory clocks
- Breach notice 72 hours · rights requests 30 days
Key areas
From requirements to practical work.
- Governance2 controls to evidence
- Principles1 control to evidence
- Lawfulness1 control to evidence
- Special categories2 controls to evidence
- Transparency1 control to evidence
- Retention1 control to evidence
- Transfers1 control to evidence
- Security1 control to evidence
- Third parties1 control to evidence
- Incidents1 control to evidence
- Rights1 control to evidence
See how the work connects.
Move from a requirement to the record, owner and evidence behind it.
Explore platform featuresStatuses support programme review; they are not legal certification.Illustrative records
What an inspector checks
13 controls, mapped to the Act.
UG-001 · Section 29; Data Protection and Privacy Regulations, 2021
Register with the Personal Data Protection Office
Data collectors, processors and controllers must register with the Personal Data Protection Office and keep the registration current.
UG-002 · Section 6
Designate a personal data protection officer
Designate a person responsible for data protection in the institution.
UG-003 · Section 3
Apply the principles of data protection
Be accountable, collect and process fairly and lawfully, minimise, retain only as long as necessary, keep data accurate, be transparent and secure, and enable data subject participation.
Three are shown here; the full set, with tasks and evidence guidance, is in hlola.Pending review by counsel.
Bring Uganda into your privacy programme.
See your readiness against Uganda DPPA in a demo set up for your organisation.