Uganda's Data Protection and Privacy Act 2019 (DPPA) and its accompanying Regulations impose rigorous obligations on organisations that collect, process, store, and transfer personal data. Non-compliance carries civil and criminal penalties, as well as significant reputational risk.
Muganwa, Nanteza & Co. Advocates advises organisations across sectors — from fintech and healthcare to telecoms and government contractors — on building legally sound data governance frameworks, achieving regulatory compliance, and defending against data-related claims.
Conducting gap analyses of your data practices against Uganda's Data Protection and Privacy Act 2019, identifying areas of non-compliance, and developing remediation roadmaps.
Drafting compliant privacy policies, cookie notices, data processing agreements (DPAs), and data sharing agreements tailored to your organisation's operations.
Building processes to handle data subject access requests (DSARs), erasure requests, portability demands, and objections within statutory timeframes.
Advising on lawful mechanisms for transferring personal data outside Uganda, including adequacy assessments, standard contractual clauses, and binding corporate rules.
Supporting in-house Data Protection Officers (DPOs) with legal guidance, or providing outsourced DPO services for organisations required to designate one under the DPPA.
Creating and maintaining Records of Processing Activities (ROPAs), data inventories, and data flow maps to establish a complete picture of your organisation's data landscape.
Advising on mandatory breach notification obligations to the Personal Data Protection Office (PDPO) and affected data subjects within the 72-hour statutory window.
Representing organisations under investigation by the PDPO, preparing responses to enforcement notices, and defending against civil or criminal proceedings arising from data protection violations.
Our team bridges the gap between legal compliance and practical data operations. We understand the regulatory frameworks, the technology ecosystems, and the commercial pressures organisations face — allowing us to provide pragmatic, actionable privacy counsel that protects your organisation and enables business growth.
Consult Our Privacy TeamNeed a DPPA compliance audit or assistance responding to a data breach? Our advocates are ready to assist.
Consult Privacy Practice