QMS LAUNCH

The QMS launch, held at the Uganda Business Facilitation Centre, was led by the Registrar General, Ms. Mercy K. Kainobwisho, who reaffirmed URSB’s commitment to excellence and continuous improvement in service delivery.

previous arrowprevious arrow
next arrownext arrow
Shadow

Uganda’s Data Protection Office Finds Google in Breach of Privacy

The Personal Data Protection Office (PDPO) has issued a ruling against Google LLC in the case of Ssekamwa Frank & 3 Others vs Google LLC, decided on July 18, 2025.

The complaint, filed on November 8, 2024, by four Ugandan citizens: Ssekamwa Frank, Leni Sharon Pamela, Amumpaire Raymond, and Awino Mercy, alleged that Google collected and processed their personal data without first registering with the PDPO, as required under the Data Protection and Privacy Act, Cap. 97. They also accused the company of unlawfully transferring their data outside Uganda without proper safeguards.

In its defence, Google admitted it had not registered but argued it was exempt. The company further claimed that extra-territorial provisions applied only to entities “domiciled” in Uganda and pointed to its global Privacy Policy as meeting accountability standards. It denied causing actionable harm or owing compensation.

The PDPO found that Google LLC qualified as both a data controller and data collector under Ugandan law and had breached the mandatory registration requirement. It also ruled that Google had unlawfully transferred personal data outside Uganda without demonstrating adequate legal safeguards.

As a result, Google was ordered to register with the PDPO within 30 days and to submit evidence of a compliant cross-border data transfer framework.

URSB, registered with the PDPO as a data controller, collector, and processor, similarly upholds its duty to safeguard the personal data of its stakeholders in line with the law.