On July 18, 2025, Uganda’s Personal Data Protection Office (PDPO) made a big decision that could change how tech giants like Google operate in Africa. The PDPO ruled that the search engine giant broke Uganda’s Data Protection and Privacy Act, a law designed to keep your personal information safe. This isn’t just about Uganda—it’s a sign that countries are getting serious about protecting your data from global companies, no matter where they’re based.
ALSO READ: Airtel Uganda’s 2025 Growth: What It Means for Your Phone and Wallet
Last November, four Ugandans filed a complaint against Google. They said Google was collecting and using their personal data—like names, locations, or browsing habits—without registering with the PDPO or getting permission to send that data outside Uganda. They also claimed this violated their rights and caused them emotional stress.
The PDPO agreed and said Google has to follow Uganda’s laws because it makes money from Ugandan users, even if it doesn’t have an office there. This idea, called “commercial nexus,” means that if a company profits from you, it must respect your country’s rules. It’s a shift from the old days when tech companies could dodge local laws just because their servers were far away.
This ruling is part of a bigger trend in Africa. Countries like Kenya and Nigeria are also cracking down on companies that misuse data. For example, Kenya is looking into how data is sent across borders, and Nigeria is building stronger enforcement teams. Uganda itself recently convicted a digital lender for privacy violations, showing it’s not just talk—regulators are taking action.
What Does Google Have to Do Now?
Within 30 days, Google must:
- Register with the PDPO as a data collector.
- Share contact details of its data protection officer.
- Prove it has a system to safely handle data sent outside Uganda.
If other African countries follow Uganda’s lead, tech giants could face tougher rules across the continent. This is good news for everyday people—it means more protection for your personal info and a push for fairness in how big companies treat users in smaller countries.Uganda’s decision is a step toward balancing the power between global tech companies and local users. It’s about making sure your data is handled with respect, no matter where you live. As more countries adopt this approach, the digital world could become a safer, fairer place for everyone.