Following a series of stakeholder consultations conducted last year, the Personal Data Protection Office (PDPO) has unveiled a Data Protection and Privacy Compliance Toolkit to support organisations to comply with the Data Protection and Privacy Act, Cap 97.
Developed with support from the Financial Sector Deepening Uganda (FSDU), the toolkit is a comprehensive resource packed with practical tools, templates, and step-by-step guidance that organisations can use to assess their data protection practices, identify gaps, and take corrective actions.

As Uganda’s digital economy continues to expand, businesses are increasingly reliant on digital platforms to deliver services. This reliance means they must process various forms of personal data, making compliance with the Data Protection and Privacy Act, Cap 97 more critical than ever. The toolkit is therefore a game-changer for businesses that often find regulatory compliance overwhelming as it provides a structured approach to data governance and protection consumer data while maintaining trust and avoiding legal repercussions.
Speaking at the launch, the National Data Protection Director, Ms. Stella Alibateese noted that the compliance toolkit was meticulously designed to empower organizations, both large and small, to navigate the complexities of data protection with confidence and clarity. “This toolkit is more than just a guide; it is a roadmap to compliance, a catalyst for change, and a tool for building a safer data privacy ecosystem. By utilizing this comprehensive resource, organizations will be able to understand and implement the requirements of the Data Protection and Privacy Act, Cap 97.”

Speaking at the same event, Mr. Joseph Lutwama, the Director of Programs at FSDU noted that their goal is to ensure that as many Ugandans have access to financial services but this requires the individuals to share their personal data so that financial institutions know who they are and how to support them. “We therefore need a conducive regulatory environment to ensure that their personal data is safe. Having a toolkit to support safe and secure use of personal data is one way to achieve that.”

Speaking on behalf of the Board Chairperson, Dr. Annabella Habinka, a member of the Board of the National Information Technology Authority-Uganda highlighted that the toolkit is a significant milestone for Uganda and for PDPO, as it aligns well with the Office’s vision of “a Uganda where data protection and privacy is understood and practiced by all.
Dr. Habinka emphasised the importance of the toolkit as it is designed to help organizations move beyond mere compliance to embracing data protection as a core value and implored all organisations to fully utilise it.

Following the launch, the PDPO also commenced a two-day training of trainers’ workshop to impart the participants selected from a cross-section of key sectors with the knowledge and skills to train others within their organizations and sectors. This is envisioned to create a competent pool of trained data protection practitioners who will amplify the impact of this initiative, ensuring that data protection principles are understood and implemented across all levels of society.
Businesses and stakeholders are encouraged to take advantage of this valuable resource. For more details and to access the toolkit, please contact compliance@pdpo.go.ug.
About the Personal Data Protection Office (PDPO):
The Personal Data Protection Office is Uganda’s independent data protection regulator and is responsible for overseeing the implementation of and enforcement of the Data Protection and Privacy Act, Cap 97. The Office’s broader mission to uphold privacy rights and safeguard personal data in Uganda through effective regulation and monitoring of those responsible for data management.
About FSD Uganda:
Financial Sector Deepening (FSD) Uganda is the country’s leading ‘think and do tank’ on financial inclusion and inclusive financial market development. FSD Uganda is an independent not-for-profit company committed to promoting greater access to financial services. FSD Uganda seeks to develop a more inclusive financial sector with a focus on low-income individuals. We support innovation, conduct research, and support regulatory processes that shape the financial sector. The organisation is funded by the Gates Foundation, the European Union, and the Mastercard Foundation.