Uganda DPPA
Data Protection and Privacy Act 2019
Uganda's comprehensive data protection law requiring parental consent for children's data and immediate breach notification.
Jurisdiction
Uganda
Enacted
Feb 25, 2019
Effective
Aug 1, 2021
Enforcement
Personal Data Protection Office
Why It Matters
Uganda's immediate breach notification (stricter than GDPR's 72 hours) and parental consent requirements create high compliance obligations for services targeting Ugandan youth.
At a Glance
Applies to
Who Must Comply
- Data controllers and processors in Uganda
- Entities processing data of Ugandan residents
- Automated systems processing personal data
Safety Provisions
- Children's data requires prior parental consent
- Immediate breach notification required
- Data Protection Officer mandatory for large-scale processing
- Data Protection Impact Assessment for high-risk processing
- Cross-border transfer restrictions
Compliance & Enforcement
Penalties
UGX 2.0B; criminal (up to 5yr)
View on map
Uganda
Focus Areas
Cite This
APA
Uganda. (2019). Data Protection and Privacy Act 2019.
Related Regulations
Zambia DPA
Zambia's comprehensive data protection law with special protections for vulnerable persons and DPIA requirements for high-risk processing.
Botswana DPA
Botswana's modernized data protection law requiring Data Protection Impact Assessment and establishing age 16 for consent.
Seychelles DPA
Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.
Rwanda AI Policy
First African country to adopt comprehensive national AI policy. Establishes Responsible AI Office (RAIO) under MINICT. Implements RURA ethical guidelines covering beneficence, non-maleficence, autonomy, justice, explicability, transparency. Non-binding framework.
Kenya AI Bill
First comprehensive AI bill in Sub-Saharan Africa. Proposes creation of AI Commissioner, AI Authority, and Advisory Committee. Establishes risk-based regulatory model aligned with EU AI Act framework, criminalizes harmful deepfakes, and mandates AI content labeling.
White House AI Legislative Framework
Non-binding White House framework outlining seven legislative pillars for Congress, including child safety protections, federal preemption of state AI laws, liability limitations for AI developers, intellectual property protections, free speech safeguards, AI infrastructure investment, and workforce development. Calls for a unified national standard superseding state AI regulations while preserving state child safety, consumer protection, and anti-fraud laws.
Last updated January 22, 2026. Verify against primary sources before relying on this information.