The Uganda Data Protection Office (PDPO) released a startling report this week revealing that more than half a million businesses are gathering personal data without the legally required registration. The audit, conducted between January and June 2024, covered a range of sectors including retail, telecom, and informal market stalls. Many of the firms lacked basic data‑security measures, exposing citizens to identity theft and privacy breaches. The PDPO has issued a 30‑day compliance deadline, after which non‑compliant entities could face fines up to UGX 5 billion or temporary shutdowns. The government is also planning a nationwide awareness campaign and a streamlined online registration portal to help small enterprises meet the new standards.
On top of everything as it happens