TheMethods Bench

Data Protection and Privacy Act, 2019

Parliament of Uganda · In force since 3 May 2019; revised edition Cap. 97 (consolidated to 31 December 2023) · last checked 30 October 2026

Uganda's law on collecting and using personal data, which applies to research data about identifiable people. It sets rules on consent, children's data, keeping data secure and sending data outside Uganda.

Read the full text

Cite this law

Data Protection and Privacy Act, 2019 (Uganda). https://ulii.org/en/akn/ug/act/2019/9/eng@2019-05-03
APA 7 EndNote · Zotero · Mendeley · BibTeX

About this law

Uganda's law on collecting and using personal data, which applies to research data about identifiable people. It sets rules on consent, children's data, keeping data secure and sending data outside Uganda.

Version in force
In force since 3 May 2019; revised edition Cap. 97 (consolidated to 31 December 2023)
Access
Open
Last checked
30 October 2026

How researchers can use it

  • Writing the data management and confidentiality sections of a protocol.
  • Justifying consent wording and data-sharing agreements.
  • Checking whether you can store or analyse data outside Uganda.

Consent before collecting personal data (s. 7), children's data (s. 8), special personal data (s. 9), further processing for research (s. 17), retention (s. 18), processing outside Uganda (s. 19), security and breach notification (ss. 20-23), and the Personal Data Protection Office (ss. 4-5).

Access the data

  1. Read the consolidated text on ULII, the Uganda Legal Information Institute (link below).
  2. Check for regulations made under the Act (a 2021 statutory instrument is listed on ULII).

Methodological cautions

  • This page summarises the Act for researchers; it is not legal advice.
  • Section numbers follow the revised edition (Cap. 97) on ULII and may differ from the Act as first passed.
  • Check ULII for amendments and regulations before relying on a specific section.

How to cite it

Use the button for APA, Vancouver, Harvard, MLA and Chicago, and for EndNote, Zotero and Mendeley files. Citations name the original publisher as author, not Methods Bench.

Legal citation: Legal citation: Data Protection and Privacy Act, 2019 (Act 9 of 2019), now Cap. 97 of the Laws of Uganda (revised edition). Status checked 30 October 2026.

Guides that use this source

Related reports and guides

Methods Bench links to official sources and does not host copies.

Cite this law

Data Protection and Privacy Act, 2019 (Act 9 of 2019), Cap. 97 (Uganda).
Use the legal citation in theses and protocols. Section numbers follow the revised edition on ULII.

Download for your reference manager

Show file contents (.ris)
TY  - STAT
TI  - Data Protection and Privacy Act, 2019 (Act 9 of 2019), Cap. 97
CY  - Uganda
PY  - 2019
UR  - https://ulii.org/en/akn/ug/act/2019/9/eng@2019-05-03
Y2  - 2026/10/30
ER  -