– Advertisement –
A recent report by Unwanted Witness, a civil society organization dedicated to defending digital and online rights, has shed light on the inadequate implementation of data protection laws by companies in Uganda.
According to Mr. Allan Kigozi, the head of legal at Unwanted Witness, the findings of the report indicate that many companies in the country are failing to uphold data privacy standards, with the best-performing company scoring only 47 percent. Kigozi emphasized that while some companies have privacy policies in place, these policies often serve merely as shields from liability rather than genuine protections for users’ privacy.
“We want to see companies prioritize their customers’ privacy by ensuring that the information they collect is used solely for its intended purpose and not shared elsewhere. Strengthening these policies is crucial,” Kigozi stated.
The report, released on Thursday, surveyed 12 companies each from Uganda, Kenya, Zimbabwe, and Mauritius. It highlighted concerns regarding the misuse of personal data, emphasizing that personal data has become one of the most valuable assets globally.
– Advertisement –
In Uganda, the report noted significant strides in the realm of data privacy, particularly with the rapid digitization of transactions and telecommunications. However, it also underscored persistent challenges, including the limited capacity and resources of the National Data Protection Office, low public awareness of data privacy rights, and ineffective mechanisms for addressing breaches.
The Data Protection and Privacy Act of 2019 outlines strict guidelines for the collection and processing of personal data. According to the Act, individuals must provide prior consent for the collection or processing of their personal data, except in specific authorized circumstances.
Offences related to data breaches, such as unlawful obtaining or disclosing of personal data, unlawful destruction, deletion, or alteration of personal data, carry penalties including fines and imprisonment.
Despite these regulations, the report suggests a gap between legislation and implementation, with companies struggling to comply fully with data protection laws. The lack of awareness among the public and the challenges faced by regulatory bodies highlight the urgent need for comprehensive education and awareness campaigns on data privacy rights and responsibilities.
Moving forward, stakeholders are called upon to work collaboratively to address these challenges, ensuring that data protection laws are effectively enforced and that individuals’ privacy rights are respected and upheld in the digital age.
Related
– Advertisement –
