Regulations › Rest of world › Uganda
DPPA (Uganda)
Data Protection and Privacy Act, 2019 (Uganda)
WhenIn effect since 3 May 2019
Who enforces itPersonal Data Protection Office (PDPO)
Who it applies toInstitutions, collectors, processors and controllers handling personal data in Uganda.
Tell the regulatorNotify the PDPO immediately on believing data was accessed or acquired by an unauthorized person
DPO requiredThe head of every institution covered by the Act must designate a data protection officer
RegistrationAll collectors, processors and controllers must register with the PDPO, renew annually and pay…
Transfers abroadProcessing or storage abroad requires adequate protection at least equivalent to the Act, or d…
Request deadline30 days for access requests
Maximum fineCourts may fine a corporation up to 2% of annual gross turnover
Data protection authority Personal Data Protection Office (PDPO)
- Address
- Palm Courts, Plot 7A, Rotary Avenue (Lugogo Bypass), Kampala
- info@pdpo.go.ug
- Phone
- +256 759 848 259 +256 417 801 053 +256 785 807 169 (WhatsApp)
- Website
- pdpo.go.ug
- Register
- Registration portal
Details from a 2021 PDPO notice; the PDPO site could not be checked directly.
Checked 18 Oct 2026. Report a change
Local help in Uganda
Law firms, training centers and other providers in Uganda can apply to be listed here. We check each one before it shows.
List your organizationRegulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws