!img-0.jpeg
THE REPUBLIC OF UGANDA
# THE DATA PROTECTION AND PRIVACY ACT, 2019
Act No. 9 of 2019
ACTS SUPPLEMENT No. 6 3rd May, 2019.
# ACTS SUPPLEMENT
to The Uganda Gazette No. 21, Volume CXII, dated 3rd March, 2019.
Printed by UPPC, Entebbe, by Order of the Government.
Act 9
Data Protection and Privacy Act
2019
THE DATA PROTECTION AND PRIVACY ACT, 2019.
ARRANGEMENT OF SECTIONS
Section
PART I—PRELIMINARY
- Application.
- Interpretation.
PART II—PRINCIPLES OF DATA PROTECTION
- Principles of data protection.
PART III—DATA COLLECTION AND PROCESSING
- Establishment of the personal data protection office
- Functions of the personal data protection office
- Data protection officer
- Consent to collect or process personal data
- Personal data relating to children
- Prohibition on collection and processing of special personal data
- Protection of privacy
- Collection of data from data subject.
- Collection of personal data for specific purpose
- Information to be given to data subject before collection of data
- Minimality
- Quality of information
- Correction of personal data
- Further processing to be compatible with purpose of collection
- Retention of records of personal data
- Processing personal data outside Uganda
PART IV—SECURITY OF DATA
- Security measures
- Security measures relating to data processed by data processor
Act 9 Data Protection and Privacy Act 2019
Section
- Data processed by operator or authorised person
- Notification of data security breaches
PART V—RIGHTS OF DATA SUBJECTS
- Right to access personal information
- Right to prevent processing of personal data
- Right to prevent processing of personal data for direct marketing
- Rights in relation to automated decision-taking
- Rectification, blocking, erasure and destruction of personal data
PART VI—DATA PROTECTION REGISTER
- Data protection register
- Access to register by the public
PART VII—COMPLAINTS
- Complaints against breach and non-compliance
- Authority to investigate complaints
- Compensation for failure to comply with this Act
- Appeals
PART VIII—OFFENCES
- Unlawful obtaining or disclosing of personal data.
- Unlawful destruction, deletion, concealment or alteration of personal data.
- Sale of personal data
- Offences by corporations.
- Regulations
- Power of the Minister to amend Schedule
Schedule
Currency point
2
Act 9 Data Protection and Privacy Act 2019
# THE DATA PROTECTION AND PRIVACY ACT, 2019
An Act to protect the privacy of the individual and of personal data by regulating the collection and processing of personal information; to provide for the rights of the persons whose data is collected and the obligations of data collectors, data processors and data controllers; to regulate the use or disclosure of personal information; and for related matters.
DATE OF ASSENT: 25th February, 2019. Date of Commencement: 3rd May, 2019
BE IT ENACTED by Parliament as follows:
PART I—PRELIMINARY
1. Application.
This Act applies to a person, institution or public body—
(a) collecting, processing, holding or using personal data within Uganda;