Thousands of Entities Flout Data Privacy Laws, Regulator Warns of Abuse

A significant number of businesses and individuals in Uganda are failing to comply with data protection regulations, leaving citizens’ sensitive information vulnerable to misuse. According to Mr. Baker Birikujja, Director of the Personal Data Protection Office (PDPO), out of an estimated 50,000 entities that should be registered, only 14,697 have complied with the Data Protection and Privacy Act.

Speaking at a recent chief executives’ breakfast meeting organized by ISACA Kampala Chapter, Mr. Birikujja highlighted that failure to register is not just an administrative oversight but a criminal offense. The PDPO is actively pursuing legal and administrative measures against those who have not registered, collaborating with the Directorate of Public Prosecutions and police to bring offenders to book.

Low public awareness is cited as a major challenge. Mr. Birikujja urged Ugandans to be more assertive when sharing personal details, questioning how their data will be stored, used, and eventually disposed of. This message was echoed at the meeting, which also focused on elevating cybersecurity from an IT department concern to a board-level priority.

Maurice Taremwa, President of ISACA Kampala Chapter, stressed the need for executives to understand and own cybersecurity risks, bridging the gap between technical teams identifying vulnerabilities and management allocating resources. The event also served as a launch for the upcoming 15th annual East Africa Information Security Conference, themed “Securing the Future Through Digital Trust,” expected to draw over 500 delegates to discuss critical IT governance and cybersecurity issues.

Source: Daily Monitor (Uganda)