Règlement sur les frais de l'autorité de régulation des…

Ce règlement fixe les frais applicables aux services de l'autorité de régulation des communications en Ouganda. Il établit les tarifs pour l'enregistrement, le renouvellement d'enregistrement et la délivrance de copies certifiées d'extraits du registre.

THE REPUBLIC OF UGANDA

THE DATA PROTECTION AND PRIVACY REGULATIONS, 2021.

STATUTORY INSTRUMENTS SUPPLEMENT

to The Uganda Gazette No. 23, Volume CXIV, dated 12th March, 2021

Printed by UPPC, Entebbe, by Order of the Government.

STATUTORY INSTRUMENTS

2021 No .21.

THE DATA PROTECTION AND PRIVACY REGULATIONS, 2021

Regulation

Part I

Preliminary

Title
Interpretation

Part II—Personal Data Protection Office

3. Establishment of Personal Data Protection Office

4. Additional functions of Personal Data Protection Office

5. Powers of Office

6. Office to cooperate with other authorities

Management of Personal Data Protection Office

National Personal Data Protection Director
Functions of National Personal Data Protection Director

. Other officers and staff of Office

Part III—Data Collection and Processing

10. Objection to collection and processing of data

11. Personal data relating to children

Data protection impact assessment

Part IV—Data Protection Register

Data Protection Register

Information contained in Register

Part V—Registration of Data Collectors, Data Processors and Data Controllers

Data collectors, data processors and data controllers to register with Office

Application for registration

Procedure for considering application

Procedure for considering application.

Report in respect of application

Grant or refusal of registration

Grant of registration and issue of certificate

Validity of registration

Refusal of registration

Review of decision

Renewal of registration

Cancellation of registration

Removal from Register

Effect of ceasing to collect and process data

Duty to notify changes of information in Register

Search and inspection of Register

Part VI—Data Correction and Processing

Request to correct or delete personal data

Processing personal data outside Uganda

Part VII—Security of Data

31. Publication of personal data security practices and procedures

32. Security measures by data controller

33. Notification of data security breaches

Part VIII Rights of Data Subjects

34. Processing or collection information without consent

35. Right to access personal information

36. Right to prevent processing of personal data

37. Right to appeal decision to continue processing personal data

38. Rights in relation to automated decision making

39. Rectification, blocking, erasure and destruction of personal data

Part IX—Complaints and Investigations

40. Complaints handling by data collectors, data controllers and data processors

41. Complaints against breach and noncompliance

42. Office to investigate complaints

43. Preservation of information during investigation

44. Director may seek assistance in investigation

45. Decision on complaint

46. Appeals

Part X-General

47. Designation of data protection officer

48. Failure to comply with notice

49. Authority to monitor compliance.

50. Reports by data collector, data processor, data controller

SCHEDULES

SCHEDULE 1—FORMS

Form 1 — Notice of Collection/Processing of Personal Data Form 2 — Application for Registration/Renewal of Registration