A forum uniting Uganda’s data protection practitioners to advocate, promote, & uphold privacy while safeguarding the integrity and security of Ugandans’ data.
12/12
Takeaways for practitioners:
•s.24 access requests = your own data only
•National ID Register access runs through the Registration of Persons Act regime
•DPPA exemptions are shields for lawful processing, not swords to compel disclosure
•Need third-party data for litigation? Go to court, not the controller.
1/12
🧵 New decision from the Personal Data Protection Office: can the Data Protection and Privacy Act, Cap 97 be used to obtain someone else’s data from NIRA? The PDPO says no. Muzira Patrick Mark v NIRA, Complaint No. PDPO 096/2025 (28 May 2026). A thread 👇
11/12
Outcome: complaint not upheld. With no violation found, the PDPO’s corrective powers (Reg 45(3)) were not triggered and ordering disclosure would undermine s.67 RoPA and risk s.81 criminal exposure for NIRA officers. Appeal lies to the Minister of ICT within 30 days.
1/12
🧵 New decision from the Personal Data Protection Office: can the Data Protection and Privacy Act, Cap 97 be used to obtain someone else’s data from NIRA? The PDPO says no. Muzira Patrick Mark v NIRA, Complaint No. PDPO 096/2025 (28 May 2026). A thread 👇
Not every app, form, or website needs all your personal information. Before sharing your data, ask; 𝐈𝐬 𝐭𝐡𝐢𝐬 𝐫𝐞𝐚𝐥𝐥𝐲 𝐧𝐞𝐜𝐞𝐬𝐬𝐚𝐫𝐲?
Data minimisation means collecting and sharing only the personal data that is relevant and required for a specific purpose. Less data collected means less risk of misuse, exposure, or unauthorized access.
#PersonalDataisPrivate #DataPrivacyUG
We have formally submitted our Internet Shutdown Report and a formal complaint to @UHRC_UGANDA, requesting an investigation and determination on the human rights violations arising from the internet shutdown.
We look forward to continued engagement and constructive dialogue on protecting digital rights and freedoms.
@FDPPUG This agreement should not have entered into in the first place for obvious reasons given our data protection legal framework and within the Spirit and letter of article 41 of our construction and the Access to information legislation. I await to be enjoined as a petitioner now.
Hey Friends,😊
@privacycentreea, in partnership with @Lawpointuganda and @TechnolegalUg, invites you to the second episode of the East African Data Protection & Privacy Webinar Series.
─────────────
🎓 From the moment you enrol in school to long after you graduate, education institutions hold some of your most personal data — academic records, disciplinary files, photographs, and more.
But how long can they keep it? Who can they share it with? What happens when your image ends up on a school's TikTok or a university billboard without your consent?
Join us as we unpack student data privacy across East Africa and draw on insights from a jurisdiction far ahead of the curve.
─────────────
🗓️ Date: Monday, 18 May 2026
⏰ Time: 2:00 PM (EAT)
📍 Platform: Zoom — Free to attend
─────────────
Topic:
Student Data Privacy: Compliance for Schools, Universities and EdTech
Who should attend?
🏫 School & university administrators
⚖️ Legal practitioners & compliance officers
🔐 Data Protection Officers (DPOs)
🎒 Students & student leaders
🖥️ EdTech professionals & teachers
👨👩👧 Parents & guardians
────────────────
🔗 Register (it's free): https://t.co/QZTrIl9vem
📲 Or scan the QR code on the flye