Uganda: PDPO urges organisations to submit annual compliance report by 28 September 2022
The Personal Data Protection Office ('PDPO') released via Twitter, on 27 September 2022, a reminder to data protection officers ('DPOs') to submit their organisation's annual privacy compliance report. In particular, according to the PDPO's template guidance, data collectors, controllers, and processors registered under the Data Protection and Privacy Regulations, 2021 are required to submit, within 90 days after the end of every financial year, a summary of:
- all complaints received and the status of such complaints, including whether the complaint was resolved or is still pending; and
- all data breaches and the action taken to address such data breaches.
In this regard, the PDPO indicated that such reports must be submitted to [email protected] by 28 September 2022. Notably, the PDPO noted that failure to do so may attract a fine or imprisonment or both.