On Wednesday, January 28, 2026, our Executive Director joined CIPESA and other key stakeholders at the Four Points by Sheraton, Kampala, for a Data Protection Clinic held as part of Data Privacy Week 2026 (#DPW2026). The clinic brought together journalists, Data Protection Officers (DPOs), and civil society actors for a timely and practical conversation on data privacy and digital security in Uganda.
The engagement focused on real-world digital security risks, emerging threats, and practical safeguards that individuals and institutions can adopt to protect personal and sensitive data. Rather than abstract policy discussions, the clinic emphasized hands-on learning, what data protection looks like in daily work, reporting, advocacy, and organisational operations.
No question is a silly question when it comes to data privacy
One of the most striking highlights of the clinic was the enthusiasm and curiosity from participants. The room was alive with thoughtful questions, shared experiences, and honest concerns about navigating data protection in an increasingly digital society.
This reaffirmed a simple but powerful truth: when it comes to data privacy, there are no silly questions. Whether you are handling sources as a journalist, managing databases as a DPO, or protecting communities as a civil society actor, understanding how data moves; and how it can be misused; is essential.
Data protection in Uganda: more than a best practice
As we mark #DataPrivacyWeek, it is important to remind ourselves that protecting digital rights in Uganda is not just a good habit; it is the law. The Data Protection and Privacy Act places clear obligations on organisations and individuals to collect, process, store, and share data responsibly.
- For businesses, this means embedding privacy-by-design into systems and workflows.
- For individuals, it means being aware of how personal data is collected and asserting the right to privacy.
- For the media and civil society, it means balancing public interest with ethical and lawful data handling.
Knowing how to handle data is not optional, it is key to staying secure, compliant, and trustworthy in today’s digital environment.
Continuing the conversation
The Data Privacy Clinic was not an endpoint, but part of a broader effort to build a culture of digital responsibility, accountability, and rights-based data governance in Uganda. We are encouraged by the commitment shown by participants and remain dedicated to supporting ongoing learning and dialogue.
If you have questions, need guidance, or would like to engage further on data protection and digital security, please reach out to us via https://helpdesk.integratedrefugee.org/ or https://integratedrefugee.org/helpdesk/. We are always ready to support.
Let us continue to use #DataPrivacyWeek as a moment to reflect, learn, and act because protecting data is protecting people.
