The Data Protection and Privacy Act, 2019 (the Act), while not yet in effect, is intended to support privacy protections already guaranteed to Ugandans under the Constitution and complement sectoral laws for regulated activities that had previously incorporated data protection provisions.
Under the Act, data subjects have the right to:
- access all personal data concerning them;
- prevent processing of personal data concerning them where it would cause undue damage or distress;
- prevent processing of personal data for purposes of direct marketing; and
- rectify, update, block, erase, or destroy personal data when it is inaccurate.