The Personal Data Protection Office is Uganda’s independent data protection authority. It is established as an independent office under the National Information Technology Authority, Uganda (NITA-U) responsible for overseeing the implementation of and enforcement of the Data Protection and Privacy Act No. 9 of 2019.
The Office is headed by a national personal data protection director, who reports directly to the NITA-U Board.
The Personal Data Protection Office’s statutory powers and functions derive from the Data Protection and Privacy Act No. 9 of 2019 which, inter alia, gives effect to Article 27 of the Constitution of the Republic of Uganda, 1995.The Personal Data Protection Office’s functions and powers are to:
- Oversee the implementation of and be responsible for the enforcement of the Data Protection and Privacy Act and Regulations thereunder;
- Coordinate, supervise and monitor data collectors, data processors, data controllers and data subjects on all matters relating to the Data Protection and Privacy Act, 2019;
- Set, monitor and regulate standards for personal data protection and privacy;
- Establish and maintain a data protection and privacy register;
- Monitor, investigate and report on the observance of the right to the privacy and of personal data;
- Receive and investigate complaints relating to infringement of rights of the rights of the data subject under the Data Protection and Privacy Act, 2019;
- Provide guidance to data collectors, data processors, data controllers and data subjects about their data protection and privacy rights, obligations and responsibilities under the Data Protection and Privacy Act, 2019.