The recent decision by the Personal Data Protection Office (PDPO) in Uganda in the case of Frank Ssekamwa & 3 others vs. Google LLC - Complaint No: 08/11/24/6683 addresses critical issues surrounding the registration of data controllers and proc...

As data protection laws continue to develop across Africa, regulators are facing a familiar challenge: how to balance individual privacy with the needs of businesses trying to reach their customers. One issue where this tension is clear is in the ar...

36 African countries have data protection laws. While there are shared underlying principles, notable differences exist in their specific requirements and implementation.Similarities: Protecting Individual Rights and Ensuring Responsible Data Handlin...

Kenya's data protection regime is dynamic, with organizations adjusting to comply with the Data Protection Act, 2019 (DPA19) and complaints being filed at the Office of the Data Protection Commissioner (the "Data Protection Commissioner"or ODPC"). Th...

As digital platforms and social media become integral to business operations, understanding and respecting image rights is crucial for organizations in Kenya. This article provides an in-depth look at the legal landscape of image rights in Kenya, hig...

Vicarious liability is a legal doctrine that holds one party responsible for the actions of another party. This concept is often applied in the context of employer-employee relationships, where an employer can be held liable for the wrongful acts com...

Organizations often use WhatsApp for communication for various reasons:It is widely accessible, with millions of users around the world already using it for personal communication. Its interface is familiar to many, making it easy for employees to ad...

In this article, we delve into Uganda's digital legacy provision and explore how organizations can implement it to ensure compliance with data protection laws. We also examine practical considerations and propose guidelines for organizations to follo...

In today's digital age, where much of our lives are conducted online, the fate of our digital footprint after we're gone becomes increasingly relevant. Uganda's Data Protection Law, particularly Article 25, acknowledges this reality an...

Data Protection laws in Africa generally outline several legally recognized bases for processing personal data:1. Consent2. Contractual necessity3. Vital interests4. Public tasks5. Legal obligation6. Legitimate interestsThese legal bases provide orga...

In an increasingly interconnected world where data flows across borders seamlessly, navigating the complex terrain of data transfer regulations becomes paramount. African countries, like their European counterparts, prioritize data protection and pri...

Section 37 of the Uganda Data Protection & Privacy Act, 2019 ("UDPA19" or the "Act") addresses the sale or offering for sale of personal data, imposing strict penalties for non-compliance.This provision has significant implications for data broke...

Section 26(3) of the Uganda Data Protection & Privacy Act, 2019 (UDPA19) introduces an intriguing provision that allows data subjects to enter into agreements for the use or processing of their personal data for a commercial benefit.This provisio...

The Malabo Convention, adopted in 2014 by the African Union, stands as a significant legal instrument aimed at promoting cybersecurity and personal data protection on the continent. The convention came into effect on 8 June 2023, almost a decade afte...

Many companies find the exchange of personal data that they hold with other organisations necessary.The transfer may be accomplished through complementary agreements to support normal processes or through ad hoc arrangements.  Data protection laws do...