Your Medical Records are Safe

The Personal Data Protection Office (PDPO) and the United Nations Capital Development Fund (UNCDF), have today launched a data protection and privacy portal that will ease reporting, processing, and resolving of data protection and privacy complaints and breaches. It will also ease registration of persons and organizations collecting and processing personal data. The portal includes SMS/USSD functionality to enable universal access and usage by most citizens. A two-month long awareness campaign to publicize and drive usage of the portal, as well as create awareness on the rights of individuals whose personal data is collected, was also launched.

“The Personal Data Protection Office is open to individuals to file their complaints if they are concerned that their personal data protection rights have not been respected and have not managed to resolve the matter with the organisation involved, whether it is a public or private organization. The data protection and privacy portal makes the filing and resolution of such complaints an efficient process,” Ms. Stella Alibateese, National Personal Data Protection Director said.

The Personal Data Protection Office was set up by the Data Protection and Privacy Act, 2019 as an independent Office under the National Information Technology Authority, Uganda (NITA-U) with the mandate to oversee the implementation and enforcement of the Act. The Office was operationalized in August 2021.

The Data Protection and Privacy Act aims to: protect the privacy of the individual and of personal data by regulating it’s collection and processing; provide for the rights of the people whose data is collected and the obligations of organizations that collect this data; and to regulate the use or disclosure of personal data. The law provides that all personal data must be handled in accordance with the principles of data protection and privacy as provided in the Act which include; Accountability, Lawfulness, Minimality, Retention, Quality, Transparency and Security.

About the Personal Data Protection Office

The Personal Data Protection Office is Uganda’s statutory body established as an independent office under the National Information Technology Authority, Uganda (NITA-U) and is responsible for overseeing the implementation of and enforcement of the Data Protection and Privacy Act. The Office is headed by the National Personal Data Protection Director. The Personal Data Protection Office’s statutory functions include the following; overseeing the implementation of and being responsible for the enforcement of the Data Protection and Privacy Act; coordinating, supervising and monitoring data collectors, data processors, and data controllers; monitoring, investigating and reporting on the observance of the right to the privacy and receiving and investigating complaints relating to violation of the Act. More information on the Office can be found on www.pdpo.go.ug