Uganda: Personal Data Protection Office announced investigation into Google LLC for alleged violations of the Data Protection and Privacy Act

Description

Personal Data Protection Office announced investigation into Google LLC for alleged violations of the Data Protection and Privacy Act

On 8 November 2024, the Personal Data Protection Office (PDPO) in Uganda initiated an investigation into Google LLC for alleged violations of the Data Protection and Privacy Act. The complaint asserted that Google, acting as a data collector, controller, and processor, failed to register with the PDPO as stipulated by the Act and its Regulations. Additionally, it alleged that Google transferred Ugandan users' personal data outside the country unlawfully, exposing the data to risks of unauthorised access. The PDPO directed Google LLC to submit a formal written response to address the accusations.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
search service provider
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-11-08
under deliberation

On 8 November 2024, the Personal Data Protection Office (PDPO) in Uganda initiated an investigation…

2025-07-18
in force

On 18 July 2025, Uganda’s Personal Data Protection Office (PDPO) issued a ruling against Google LLC…