Data Privacy
Data protection enters its enforcement phase
The shift from registration to active enforcement under the Data Protection and Privacy Act, 2019 and S.I. 21 of 2021 — and what regulated entities must now be able to show.
Ligomarc Technology Group
· 6 min read
The first phase of Uganda's data protection regime was administrative: register, appoint, and file. The second phase asks a harder question — whether an organisation can demonstrate, on demand, the lawful basis on which it holds and processes what it holds.
Most institutions can answer the first question. Considerably fewer can answer the second with documents rather than assurances.
This is a draft placeholder. Full analysis and citations to be finalised at drafting.
How we can help
If this raises a question for your institution, speak to the partner responsible for Technology & Intellectual Property.
More insights
Regulatory
Data sovereignty for African regulators
Competition & M&A
Cross-border merger control in the East African Community
Restructuring
Divergent rescue cultures across East Africa