Uganda: Personal Data Protection Office issued ruling in investigation into Google LLC for alleged violations of the Data Protection and Privacy Act

On 18 July 2025, Uganda’s Personal Data Protection Office (PDPO) issued a ruling against Google LLC for violation of the Data Protection and Privacy Act. The ruling highlighted that Google failed to register as a data controller, collector, and processor, and ordered Google to register with the PDPO and appoint a Data Protection Officer within 30 days. The ruling further mentioned that Google transferred personal data of Ugandan citizens outside Uganda without demonstrating adequate safeguards and required Google to submit evidence of its compliance framework for cross-border data transfers.