Africa-Press – Uganda. Four Ugandan digital rights activists have taken the Personal Data Protection Office (PDPO) and global tech giant Google to the High Court, accusing both of violating Uganda’s data protection laws and undermining citizens’ digital privacy rights.
The applicants Mercy Awino, Frank Ssekamwa, Leni Sharon Pamela, and Raymond Amumpaire claim that Google LLC and Google Uganda have been collecting and processing personal data of Ugandans without registering with the PDPO as required under the Data Protection and Privacy Act (Cap 97).
They further allege that the company transferred personal data abroad without obtaining valid, informed consent from users, breaching the law.
The dispute began on October 9, 2024, when the group formally wrote to Google demanding compliance with Uganda’s data protection laws.
After receiving no response, they lodged a complaint with the PDPO on November 8, 2024.
The complaint, registered under reference number 8/11/24/6683, led to an ex parte hearing on November 21, 2024.
During the hearing, the PDPO acknowledged Google’s failure to register and promised swift action.
However, despite a legal obligation under Regulation 45(1) of the Data Protection and Privacy Regulations, 2021, to resolve complaints within 30 days, no ruling was issued.
In February 2025, the PDPO informed the applicants that it was “engaging Google LLC and Google Uganda for an amicable settlement” and committed to feedback within two weeks a promise that remains unfulfilled.
In a letter dated April 28, 2025, Raymond Amumpaire, writing on behalf of the group, petitioned Attorney General Kiryowa Kiwanuka for urgent intervention.
The letter criticised the PDPO’s “prolonged inaction” and called for a definitive ruling within seven days. It was copied to the Minister of ICT and National Guidance,Dr. Chris Baryomunsi, and the chairperson of the National Information Technology Authority – Uganda (NITA-U), which oversees the PDPO.
“This inaction undermines the enforcement of Uganda’s data protection laws and facilitates ongoing violations of citizens’ constitutional right to privacy under Article 27 of the 1995 Constitution,” the letter read.
“It erodes public trust in regulatory institutions and compromises Uganda’s digital sovereignty.”
When their appeals went unanswered, the activists filed Judicial Review Cause No. 22 of 2025 on May 22, seeking several court orders.
They request a declaration that Google’s data processing is unlawful and an injunction halting further data collection until the company registers with the PDPO.
They also want the court to find the PDPO’s failure to act irrational and unlawful and to compel it to conclude the complaint within 30 days of the court ruling.
Additionally, they seek administrative sanctions and an order for the PDPO to publish a list of countries with data protection laws equivalent to Uganda’s.
“This case isn’t about compensation,” said petitioner Raymond Amumpaire. “It’s about ensuring that powerful tech companies obey our laws.” His co-petitioner, Leni Sharon Pamela, added, “If we allow the law to bend for the powerful, it will break for the rest of us.”
For More News And Analysis About Uganda Follow Africa-Press
