news 12 June 2026 Daily Monitor (Uganda)
Businesswoman Fined in Kampala for Mobile Loan Data Breach
A Kampala court has convicted a businesswoman for unlawfully obtaining and disclosing a client's personal data, highlighting ongoing concerns about data privacy in Uganda's rapidly digitizing landscape. The conviction comes amid warnings from digital rights experts about persistent data breaches. Source: https://www.monitor.co.ug/uganda/news/national/kampala-court-convicts-businesswoman-over-mobile-loan-data-privacy-breach-5493840
A 31-year-old businesswoman, Finah Atlist, has been sentenced to a Shs 100,000 fine or two months in prison by a Kampala court for violating Uganda’s data protection laws. The conviction stems from an incident in October 2025 where Atlist, acting as an agent for the online money lending app Gold Credit, unlawfully accessed and shared a client’s National ID details with unauthorized third parties.
Atlist pleaded guilty to the charges, which included unlawful obtaining and disclosure of personal data, contravening Section 35 of the Data Protection and Privacy Act, 2019, and related regulations. She also admitted to operating without registering with the Personal Data Protection Office, a violation of Section 29(3) of the same act.
Magistrate Geoffrey Akena delivered the ruling after Atlist agreed to a plea bargain with the prosecution. This case underscores the challenges Uganda faces in enforcing its Data Protection and Privacy Act of 2019, despite its strict regulations.
Digital rights advocates express concern that data breaches remain a significant threat, exacerbated by rapid digitalization and insufficient public awareness of digital rights. Recent reports indicate Uganda lags in data protection compared to other East African nations. A survey by Unwanted Witness found that while e-commerce and digital lending services showed some compliance, sectors like telecommunications, financial services, and e-government platforms scored poorly in safeguarding personal information.