Is a listed company, in Uganda

Data Protection and Privacy Act, 2019, ss. 31-38 (enforcement and offences) · Read the law's page

• Expect a data subject or any other person to be able to complain to the National Information Technology Authority that you are infringing their rights or violating this Act, and expect the Authority to investigate every complaint and be able to direct you to remedy a breach.
• Expect a data subject who suffers damage or distress from your contravention of this Act to be able to sue you in court for compensation, and be ready to prove you took reasonable care to comply in order to defend the claim.
• Do not unlawfully obtain, disclose, destroy, delete, mislead, conceal, alter, sell or offer to sell personal data, on pain of a fine of two hundred and forty to two hundred and forty five currency points or imprisonment of up to ten years, or both.
• Expect a convicted corporation to face an additional fine of up to two percent of its annual gross turnover, and expect an officer who knowingly and wilfully authorised or permitted the offence to be liable alongside it.