Loi Act No. 9 of 2019 · The Data Protection and…

Cette loi ougandaise régit la collecte et le traitement des données personnelles afin de protéger la vie privée des individus. Elle établit des principes de protection des données, les droits des personnes concernées, et les obligations des collecteurs, processeurs et contrôleurs de données. La loi crée un office de protection des données, prévoit un registre des données, et instaure des mécanismes de plainte et des sanctions pénales en cas de non-respect. Elle s'applique à toute personne ou…

THE REPUBLIC OF UGANDA

ACTS SUPPLEMENT No. 6 3rd May, 2019.

ACTS SUPPLEMENT

to The Uganda Gazette No. 21, Volume CXII, dated 3rd March, 2019.

Printed by UPPC, Entebbe, by Order of the Government.

Act 9

Data Protection and Privacy Act

THE DATA PROTECTION AND PRIVACY ACT, 2019.

ARRANGEMENT OF SECTIONS

Section

PART I—PRELIMINARY

Application.
Interpretation.

PART II—PRINCIPLES OF DATA PROTECTION

Principles of data protection.

PART III—DATA COLLECTION AND PROCESSING

Establishment of the personal data protection office
Functions of the personal data protection office
Data protection officer
Consent to collect or process personal data
Personal data relating to children
Prohibition on collection and processing of special personal data
Protection of privacy
Collection of data from data subject.
Collection of personal data for specific purpose
Information to be given to data subject before collection of data
Minimality
Quality of information
Correction of personal data
Further processing to be compatible with purpose of collection
Retention of records of personal data
Processing personal data outside Uganda

PART IV—SECURITY OF DATA

Security measures
Security measures relating to data processed by data processor

Act 9 Data Protection and Privacy Act

Section

Data processed by operator or authorised person
Notification of data security breaches

PART V—RIGHTS OF DATA SUBJECTS

Right to access personal information
Right to prevent processing of personal data
Right to prevent processing of personal data for direct marketing
Rights in relation to automated decision-taking
Rectification, blocking, erasure and destruction of personal data

PART VI—DATA PROTECTION REGISTER

Data protection register
Access to register by the public

PART VII—COMPLAINTS

Complaints against breach and non-compliance
Authority to investigate complaints
Compensation for failure to comply with this Act
Appeals

PART VIII—OFFENCES

Unlawful obtaining or disclosing of personal data.
Unlawful destruction, deletion, concealment or alteration of personal data.
Sale of personal data
Offences by corporations.
Regulations
Power of the Minister to amend Schedule

Schedule

Currency point

Act 9 Data Protection and Privacy Act 2019

THE DATA PROTECTION AND PRIVACY ACT, 2019

An Act to protect the privacy of the individual and of personal data by regulating the collection and processing of personal information; to provide for the rights of the persons whose data is collected and the obligations of data collectors, data processors and data controllers; to regulate the use or disclosure of personal information; and for related matters.

DATE OF ASSENT: 25th February, 2019. Date of Commencement: 3rd May, 2019

BE IT ENACTED by Parliament as follows:

PART I—PRELIMINARY

1. Application.

This Act applies to a person, institution or public body—

(a) collecting, processing, holding or using personal data within Uganda; (b) outside Uganda who collects, processes, holds, or uses personal data relating to Ugandan citizens.