Sends faxes, in Uganda

Data Protection and Privacy Act, 2019, ss. 13, 16, 24-26, 28 (rights of data subjects) · Read the law's page

• Before or as soon as practicable after collecting personal data, tell the data subject its nature and category, your name and address, the purpose, whether supplying it is discretionary or mandatory, the consequences of not providing it, the recipients, their rights of access and rectification, and the retention period.
• Correct or delete personal data on a data subject's request where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, tell the data subject the outcome, and notify every person the data was previously disclosed to of a correction made.
• Answer a data subject's request to confirm whether you hold their personal data, describe it, and identify any third party with access to it, within thirty days of the request.
• Stop processing personal data within fourteen days of a data subject's written notice that the processing causes or is likely to cause them unwarranted substantial damage or distress, unless the processing falls under section 7(2), and comply within seven days if the Authority orders you to.
• Stop processing a data subject's personal data for direct marketing within fourteen days of their written notice to do so.
• Rectify, update, block, erase or destroy personal data the Authority finds inaccurate on a data subject's complaint, and notify every third party the data was previously disclosed to of that action.