Following a series of stakeholder consultations conducted last year, the Personal Data Protection Office (PDPO) has today unveiled a Data Protection and Privacy Compliance Toolkit to support organisations to comply with the Data Protection and Privacy Act, Cap 97. This landmark event held at Sheraton Kampala Hotel marks a major step towards strengthening Uganda’s efforts to strengthen data protection and privacy practices with organisations that collect and process personal data.
Developed with support from the Financial Sector Deepening Uganda (FSDU), the toolkit is a comprehensive resource packed with practical tools, templates, and step-by-step guidance that organisations can use to assess their data protection practices, identify gaps, and take corrective actions.
As Uganda’s digital economy continues to expand , businesses are increasingly reliant on digital platforms to deliver services. This reliance means they must process various formsof personal data, making compliance with the Data Protection and Privacy Act, Cap 97 more critical than ever. The toolkit is therefore a game-changer for businesses that often find regulatory compliance overwhelming as it provides a structured approach to data governance and protectionconsumer data while maintaining trust and avoiding legal repercussions.
Speaking at the launch, the National Data Protection Director, Ms. Stella Alibateese noted that the compliance toolkit was meticulously designed to empower organizations, both large and small, to navigate the complexities of data protection with confidence and clarity. “This toolkit is more than just a guide; it is a roadmap to compliance, a catalyst for change, and a tool for building a safer data privacy ecosystem. By utilizing this comprehensive resource, organizations will be able to understand and implement the requirements of the Data Protection and Privacy Act, Cap 97.”
Speaking at the same event, Mr. Joseph Lutwama, theDirector of Programs at FSDU noted that their goal is to ensure that as many Ugandans have access to financial services but this requires the individuals to share their personal data so that financial institutions know who they are and how to support them. “We therefore need a conducive regulatory environment to ensure that their personal data is safe. Having a toolkit to support safe and secure use of personal data is one way to achieve that.”
Speaking on behalf of the Board Chairperson, Dr. Annabella Habinka, a member of the Board of the National Information Technology Authority-Uganda highlighted that the toolkit is a significant milestone for Uganda and for PDPO, as it aligns well with the Office’s vision of “a Uganda where data protection and privacy is understood and practiced by all.
Dr. Habinka emphasised the importance of the toolkit as it is designed to help organizations move beyond mere compliance to embracing data protection as a core value and implored all organisations to fully utilise it.
Following the launch, the PDPO also commenced a two-day training of trainers’ workshop to impart the participants selected from a cross-section of key sectors with the knowledge and skills to train others within their organizations and sectors. This is envisioned to create a competent pool of trained data protection practitioners who will amplify the impact of this initiative, ensuring that data protection principles are understood and implemented across all levels of society.
Businesses and stakeholders are encouraged to take advantage of this valuable resource. For more details and to access the toolkit, please contact compliance@pdpo.go.ug.
