has delivered a decisive ruling in favour of four complainants against Google LLC, finding the tech giant in breach of Uganda’s Data Protection and Privacy Act, Cap. 97. The PDPO determined that Google LLC failed to register locally as a data controller and collector, and unlawfully transferred Ugandan data abroad without demonstrating proper safeguards or accountability. The PDPO has ordered Google to register within 30 days and provide evidence of compliance for cross-border transfers, marking a significant victory for Ugandan digital rights. This ruling sends a loud message that global tech companies must adhere to local data protection laws and respect the privacy of Ugandan citizens.
