Loi 2019 · The Data Protection and Privacy Act, 2019

Cette loi vise à protéger la vie privée des individus et les données personnelles en réglementant la collecte et le traitement des informations personnelles. Elle établit les droits des personnes dont les données sont collectées et les obligations des collecteurs, processeurs et responsables de traitement de données. La loi réglemente également l'utilisation et la divulgation des informations personnelles.

THE REPUBLIC OF UGANDA

Act No. 9 of 2019

ACTS SUPPLEMENT

to The Uganda Gazette No. 21, Volume CXII, dated 3rd March, 2019.

Pied yEnebede th Govermn

Act 9

Data Protection and Privacy Act

2019

THE DATA PROTECTION AND PRIVACY ACT, 2019.

ARRANGEMENT OF SECTIONS

Section

Part I—Preliminary

Application.
Interpretation.

Part II—Principles of Data Protection

Principles of data protection.

Part III—Data Collection and Processing

Establishment of the personal data protection office
Functions of the personal data protection office
Data protection officer
Consent to collect or process personal data
Personal data relating to children
Prohibition on collection and processing of special personal data
Protection of privacy
Collection of data from data subject.
Collection of personal data for specific purpose
Information to be given to data subject before collection of data
Minimality
Quality of information
Correction of personal data
Further processing to be compatible with purpose of collection
Retention of records of personal data
Processing personal data outside Uganda

Part IV—Security of Data

Security measures
Security measures relating to data processed by data processor

Section

Data processed by operator or authorised person Notification of data security breaches

Part V—Rights of Data Subjects

Right to access personal information Right to prevent processing of personal data Right to prevent processing of personal data for direct marketing Rights in relation to automated decision-taking Rectification, blocking, erasure and destruction of personal data

Part VI—Data Protection Register

Data protection register
Access to register by the public

Part VII—Complaints

Complaints against breach and non-compliance Authority to investigate complaints 33. Compensation for failure to comply with this Act 34. Appeals

Part VIII—Offences

Unlawful obtaining or disclosing of personal data. 36. Unlawful destruction, deletion, concealment or alteration of personal data. 37. Sale of personal data 38. Offences by corporations. 39. Regulations 40. Power of the Minister to amend Schedule

THE DATA PROTECTION AND PRIVACY ACT, 2019

An Act to protect the privacy of the individual and of personal data by regulating the collection and processing of personal information; to provide for the rights of the persons whose data is collected and the obligations of data collectors, data processers and data controllers; to regulate the use or disclosure of personal information; and for related matters.

Date OF AssEnt: 25th February, 2019.

Date of Commencement: 3rd May, 2019

BE IT ENActED by Parliament as follows:

Part I—PrEliminary

1. Application.

This Act applies to a person, institution or public body—

(a) collecting, processing, holding or using personal data within Uganda; (b) outside Uganda who collects, processes, holds, or uses personal data relating to Ugandan citizens.

2. Interpretation.

In this Act unless the context otherwise requires—

"Authority" means the National Information Technology Authority - Uganda;