





Chief Guest Dr. Mary Teopista (Center), Amb. Francis Butagira, Registrar General Ms. Mercy K. Kainobwisho and URSB board members pose for a photo at the URSB ISO Certification External Stakeholders celebration
Hon. Nobert Mao congratulates the Registrar General, Ms. Mercy K. Kainobwisho, and Board member, Ms. Lydia A. Sekkabira on the ISO 9001:2015 certification milestone
Mr. Hamidu Tumuhimbise, a senior Registration Officer, attends to a client during the UEB claimants exercise at the Uganda Business Facilitation Center, Kololo
A delegation from PACRA led by the Deputy Registrar Mr. Chewe Peter Chilufya (Center) visited URSB for a 3 days benchmarking visit on the Intellectual Property Registry on how systems operate, the digital improvements implemented and how these reforms contribute to reduced turnaround time
A delegation from UNOC visits URSB to benchmark on the Digital Transformation Journey.
Director General WIPO Mr. Daren Tang, Minister of Justice Hon. Nobert Mao, The Registrar General Ms. Mercy K. Kainobwisho, URSB Board members a delegation from WIPO pause for a photo at the Uganda Business Facilitation Center during the DG’s mission to Uganda

Uganda’s Data Protection Office Finds Google in Breach of Privacy
The Personal Data Protection Office (PDPO) has issued a ruling against Google LLC in the case of Ssekamwa Frank & 3 Others vs Google LLC, decided on July 18, 2025.
The complaint, filed on November 8, 2024, by four Ugandan citizens: Ssekamwa Frank, Leni Sharon Pamela, Amumpaire Raymond, and Awino Mercy, alleged that Google collected and processed their personal data without first registering with the PDPO, as required under the Data Protection and Privacy Act, Cap. 97. They also accused the company of unlawfully transferring their data outside Uganda without proper safeguards.
In its defence, Google admitted it had not registered but argued it was exempt. The company further claimed that extra-territorial provisions applied only to entities “domiciled” in Uganda and pointed to its global Privacy Policy as meeting accountability standards. It denied causing actionable harm or owing compensation.
The PDPO found that Google LLC qualified as both a data controller and data collector under Ugandan law and had breached the mandatory registration requirement. It also ruled that Google had unlawfully transferred personal data outside Uganda without demonstrating adequate legal safeguards.
As a result, Google was ordered to register with the PDPO within 30 days and to submit evidence of a compliant cross-border data transfer framework.
URSB, registered with the PDPO as a data controller, collector, and processor, similarly upholds its duty to safeguard the personal data of its stakeholders in line with the law.