Uganda’s Data Protection Law Sees First-Ever Criminal Conviction
🇺🇬 | Uganda’s Data Protection Law Sees First-Ever Criminal Conviction
Kampala — ENS
In a major legal milestone, Uganda has registered its first criminal conviction under the Data Protection and Privacy Act, signaling the beginning of active enforcement across the country.
The Personal Data Protection Office (PDPO), in collaboration with the Criminal Investigations Directorate and the Office of the Director of Public Prosecutions, prosecuted Ronald Mugulusi, director of Nano Loans Microfinance Ltd — the company behind the Quickloan app.
Mugulusi was found guilty of processing personal data without proper registration and consent, following repeated notices from the regulators. He pleaded guilty, entered a plea bargain, and was fined UGX 300,000. He was also ordered to compensate the affected user — marking a historic legal first in enforcing Uganda’s data privacy law.
“This conviction is a clear message. If you collect or use people’s data, you must register and operate within the law.”
— Baker Birikujja, Acting PDPO Director
The Data Protection and Privacy Act (2019) requires all data collectors and processors — from mobile apps to enterprises — to register with the PDPO, maintain transparency, and secure user consent before handling any personal data.
Authorities say more enforcements are expected, especially in sectors like finance, digital lending, and AI technologies. The message is clear: compliance is no longer optional.
![]() |
Sponsored |
🧠 ENS Insight
This is more than a fine — it’s a statement. If you operate digitally in Uganda, particularly in finance or tech, you must comply. No shortcuts. No excuses.