CIRCULAR No. 01 OF 2022 DATED OCTOBER 7, 2022
TO: ALL NON-GOVERNMENTAL ORGANISATIONS (NGOs)
REMINDER OF THE REQUIREMENT TO REGISTER UNDER THE DATA PROTECTION AND PRIVACY ACT, 2019
The Data Protection and Privacy Act was passed in 2019 and Regulations under the Act were gazetted in March 2021. Following the passing of the required Regulations, the Personal Data Protection Office, an independent office under the National Information Technology Authority, Uganda (NITA-U) was operationalized in August 2021 whose mandate is to regulate the collecting and processing of personal data in Uganda.
Section 29 of the Act and Regulation 15(1) of the Data Protection and Privacy Regulations require all persons, institutions, and public bodies collecting and processing personal data to register with the Personal Data Protection Office (PDPO). Subsequent to this, the PDPO published a press release in the Daily Monitor and New Vision on 30th November and 2nd December 2021 respectively notifying all entities that collect and process personal data to register with a grace period of up to December 2021. NGOs qualify to register as bodies that collect and process personal data.
This serves to remind you to register with the Personal Data Protection Office not later than 31st October 2022. You can register via https://pdpo.go.ug/register. You can also contact the PDPO through Government of Uganda Service Desk at email@example.com or through their WhatsApp number +256 785 807 169 or call them on +256 759 848 259/ +256 417 801 053 for all guidance on data protection and privacy matters.
Please note that with effect from November 2022, PDPO will start enforcement measures against organizations/persons who have not registered as required by law and any future licenses from us shall require you to be compliant with the Data Protection and Privacy Act. In addition, it will affect the services offered by NGO Bureau to the non-compliant NGOs.
FOR GOD AND MY COUNTRY