About Us

The Personal Data Protection Office is Uganda’s independent data protection authority. It is established as an independent office under the National Information Technology Authority, Uganda (NITA-U) responsible for overseeing the implementation of and enforcement of the Data Protection and Privacy Act No. 9 of 2019.

The Office is headed by a national personal data protection director, who reports directly to the NITA-U Board.

The Personal Data Protection Office’s statutory powers and functions derive from the Data Protection and Privacy Act No. 9 of 2019 which, inter alia, gives effect to Article 27 of the Constitution of the Republic of Uganda, 1995.

The Personal Data Protection Office’s functions and powers are to:
  1. Oversee the implementation of and be responsible for the enforcement of the Data Protection and Privacy Act and Regulations thereunder;
  2. Coordinate, supervise and monitor data collectors, data processors, data controllers and data subjects on all matters relating to the Data Protection and Privacy Act, 2019;
  3. Set, monitor and regulate standards for personal data protection and privacy;
  4. Establish and maintain a data protection and privacy register;
  5. Monitor, investigate and report on the observance of the right to the privacy and of personal data;
  6. Receive and investigate complaints relating to infringement of rights of the rights of the data subject under the Data Protection and Privacy Act, 2019;
  7. Provide guidance to data collectors, data processors, data controllers and data subjects about their data protection and privacy rights, obligations and responsibilities under the Data Protection and Privacy Act, 2019.