Organizations often use WhatsApp for communication for various reasons:It is widely accessible, with millions of users around the world already using it for personal communication. Its interface is familiar to many, making it easy for employees to ad...

In this article, we delve into Uganda's digital legacy provision and explore how organizations can implement it to ensure compliance with data protection laws. We also examine practical considerations and propose guidelines for organizations to follo...

In today's digital age, where much of our lives are conducted online, the fate of our digital footprint after we're gone becomes increasingly relevant. Uganda's Data Protection Law, particularly Article 25, acknowledges this reality an...

Data Protection laws in Africa generally outline several legally recognized bases for processing personal data:1. Consent2. Contractual necessity3. Vital interests4. Public tasks5. Legal obligation6. Legitimate interestsThese legal bases provide orga...

In an increasingly interconnected world where data flows across borders seamlessly, navigating the complex terrain of data transfer regulations becomes paramount. African countries, like their European counterparts, prioritize data protection and pri...

Section 37 of the Uganda Data Protection & Privacy Act, 2019 ("UDPA19" or the "Act") addresses the sale or offering for sale of personal data, imposing strict penalties for non-compliance.This provision has significant implications for data broke...

Section 26(3) of the Uganda Data Protection & Privacy Act, 2019 (UDPA19) introduces an intriguing provision that allows data subjects to enter into agreements for the use or processing of their personal data for a commercial benefit.This provisio...

The Malabo Convention, adopted in 2014 by the African Union, stands as a significant legal instrument aimed at promoting cybersecurity and personal data protection on the continent. The convention came into effect on 8 June 2023, almost a decade afte...

Many companies find the exchange of personal data that they hold with other organisations necessary.The transfer may be accomplished through complementary agreements to support normal processes or through ad hoc arrangements.  Data protection laws do...