Claiming Digital Rights in Uganda’s Business Sector

By CIPESA Writer |

In an era where digital technologies are reshaping every sector including health, agriculture, finance, education and the labour market, Uganda is fast-tracking its ambition to become a fully connected, inclusive digital society. Yet, as the country rolls out its Digital Transformation Roadmap, critical questions remain: Who is being left behind? Who bears the cost of connecting the unconnected? How do we ensure that technological innovation does not come at the expense of human rights protection?

These were the central concerns at the inaugural National Business and Digital Rights Policy Dialogue hosted by the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) on July 23, 2025. The event brought together 55 participants comprising policymakers, innovators, civil society, the private sector, and development partners to explore how Uganda’s digital transformation is affecting human rights, especially data protection, privacy, access, and equity. The dialogue reviewed not just Uganda’s      progress, but the power dynamics, policy gaps, and human rights risks shaping digitalisation in business.

The Digital Vision vs. The Digital Reality

Uganda’s Digital Transformation Roadmap sets bold targets: 90% household connectivity, nationwide broadband coverage, and widespread e-service access by 2040. Progress is visible, with over 4,000km of national optical fibre infrastructure laid, and more than 100 digital public services rolled out. Yet, beneath these achievements, gaps in digital literacy, access and utility, as well as funding constraints, persist.

According to the 2024 National Population and Housing Census, Uganda’s population stands at 45.9 million, of whom 50.5% are under the age of 18, representing a massive youth cohort born into a digital world yet often lacking affordable internet access and digital tools. Connectivity gaps are further shaped by geography, with over 75% of the population living in rural areas where infrastructure is limited.

On the gender lens, women who comprise 23.4 million of the population, slightly outnumbering men at 22.5 million, continue to disproportionately face digital access barriers. These range from high data costs, low digital literacy, and limited access to devices and digital infrastructure, especially in rural and remote districts. As one of the panelists during the policy dialogue noted, “Digital transformation is moving fast, but our institutions and communities are not always keeping pace.”

Meanwhile, the informal sector, which employs approximately 80-92% of the country’s workforce, remains largely invisible in national digital strategies and compliance frameworks. This informal sector significantly overlaps with Micro, Small, and Medium Enterprises (MSMEs), which are central to Uganda’s economic growth, yet they often operate without proper tools to secure user data or navigate the evolving digital compliance landscape due to limited awareness, resources, and technical capacity.

As businesses digitise, their responsibility to protect users’ rights increases. However, many of them lack the knowledge to protect these rights. Uganda’s laws and enforcement mechanisms also have gaps. As a result, there is weak oversight over fintech platforms and digital lenders, low awareness and implementation of the Data Protection and Privacy Act, rampant digital surveillance, and gendered digital harms, including online harassment.

Data Is Power but Who Holds It?

Uganda’s fast-growing population is generating an unprecedented amount of personal data. The 2024 population census itself relied on tablet-based digital enumeration for the first time. However, while digital data collection is expanding, data governance is not keeping pace. The Personal Data Protection Office (PDPO) and National Information Technology Authority Uganda (NITA-U) are key players, but capacity and resourcing gaps persist. If left unaddressed, digital innovation risks entrenching inequality, with vulnerable populations, especially refugees, informal workers, and low-income women, paying the price for systems that were not designed with their rights in mind.      

Digital Rights are Human Rights

The future of work in the advent of technology emerged as a key aspect of digital rights, with Moses Okello of the National Organisation of Trade Unions (NOTU) warning that Uganda’s labour laws have not kept pace with the rise of gig work and digital employment. Millions of informal workers remain unprotected and unaware of their rights in the digital economy. He called for urgent legal reforms and a national strategy that integrates labour protections into digital policy, while urging stronger collaboration with civil society to build grassroots awareness and empower workers to navigate digital transitions.

Ruth Ssekindi, Director at the Uganda Human Rights Commission (UHRC), underscored the commission’s constitutional duty to uphold human rights across both state and private sectors, particularly in Uganda’s fast-evolving digital landscape. She highlighted growing concerns over digital rights violations including uninformed data consent, artificial intelligence (AI) manipulation, child exploitation, and poor data security, noting that these challenges disproportionately affect vulnerable populations amid low digital literacy and weak enforcement.

Ssekindi called on businesses to embrace a broader duty of care that goes beyond tax compliance and profit, stressing the need to respect, protect, and remedy digital rights violations. She also pointed to the persistent gender gap in digital access and urged greater inclusion of women and marginalised communities in digital development. While the UHRC plays a key role in shaping digital governance through legal review, education, and policy oversight, she noted that the commission must be adequately resourced, empowered and supported to effectively fulfil its mandate in the digital age.

The dialogue reinforced a clear message that connectivity alone is not enough. Uganda must build an inclusive digital economy anchored in justice, transparency, and community voice. This means empowering watchdog institutions like the PDPO, updating outdated laws and regulations, investing in digital literacy, especially for youths and women, and supporting civic participation in digital policy-making.

In direct response, CIPESA launched the #BeeraSharp (translated as “Be Smart”) campaign. This initiative aims to equip Ugandan businesses with the knowledge and tools to act responsibly in the digital space. #BeeraSharp champions a culture of accountability, urging businesses to take charge of how they collect, store, share, and protect user data. It also promotes understanding of legal obligations under Uganda’s Data Protection and Privacy Act, while encouraging ethical digital conduct across sectors.

A Digital Future for All?

As Uganda ramps up its digitalisation agenda and embraces emerging technologies such as AI and robotics, businesses, policymakers, and civil society must work hand in hand to ensure Uganda’s digital revolution is not just a story of innovation but also a story of inclusion and respect for human rights. As the dialogue closed, one key takeaway stood out: Uganda’s digital future must be intentionally inclusive and rights-driven. Achieving this will require cross-sector collaboration to scale digital skills, reform of outdated laws, more financial and capacity support to institutions like UHRC, NITA-U and the PDPO to protect data rights, and empowering communities through digital literacy, local innovation, and inclusive governance.

Ayele Addis Ambelu

Ayele Addis Ambelu is an award-winning journalist, investigative reporter, and digital rights advocate with over five years of experience in public interest journalism. He works with Africa News Channel and Ethiopian Mass Media Action (EMMA NEWS), producing in-depth stories on digital
governance, human rights, technology, and environmental justice. Ayele’s reporting focuses on the impact of digital public infrastructure—such as digital ID systems, open data, and internet access—on marginalized communities in Ethiopia and across Africa. He holds an MA in Media and
Communication and has published over 100 investigative pieces spanning radio, online, and academic platforms. As a media literacy trainer and program editor, Ayele also mentors emerging journalists on fact-checking, digital safety, and AI in the newsroom. His work has been recognised by the Nile Media Awards, the Festove investigative Media Award in Switzerland, the African Continental Re media award in South Africa, and WHO Africa. He is passionate about using journalism to expose inequality and drive inclusive digital transformation.

Articles published include,

A Digital Promise With Unequal Outcomes

What is the digital ID that is supposed to be issued to all legal residents of Ethiopia?

Challenges and solutions of the Digital Ethiopia 2025 journey

Digital Ethiopia or Digital Mirage? Who Pays When E-Government Fails

Audio Recordings

By Ayele Addis Ambelu

Lesotho Charts a Progressive Path on Data Governance

Patricia Ainembabazi |

From July 28-31, Lesotho’s highland capital of Maseru buzzed with the energy of a data governance sprint. Government officials, academics, civil society, and the private sector assembled for an intensive workshop convened by the African Union Development Agency-NEPAD and AU-GIZ with support from the Lesotho Ministry of Information, Communications, Science, Technology and Innovation (MICSTI), the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) and the Kenya ICT Action Network (KICTANet). 

The gathering drew over 60 participants with a shared proposition: get everyone on the same page about what good data governance should look like in Lesotho and how to achieve it. The workshop charted a pathway for Lesotho to domesticate the African Union Data Policy Framework (AUDPF), which was adopted by the African Union in 2022. The framework provides guidance to Member States on building harmonised, rights-respecting data governance policies that support digital transformation, innovation, and secure cross-border data flows. 

Lesotho’s efforts to domesticate this framework come at a crucial time, as the country seeks to modernise its digital policy environment and position itself within the continent’s increasingly data-driven economy. These efforts, including the workshop, demonstrate Lesotho’s political will to align with continental digitalisation and data governance blueprints such as the AUDPF and to build an inclusive digital future.

Lesotho’s Minister for Information, Communications, Science, Technology and Innovation,  Nthati Moorosi, stated that the various workshop sessions aimed to “instill more understanding on data governance for clear domestication of the [AUDPF] policy framework.” Sessions saw participants introduced to key concepts such as data as a public good, the importance of ethics and accountability, and the need for harmonised cross-border data policies. Case studies from across Africa helped illustrate how sound data governance could unlock value in sectors such as agriculture, health, and education.  

CIPESA led practical sessions during which participants examined Lesotho’s Data Protection Act and the draft Data Management Policy (2025) in relation to key African instruments, including the AUDPF, the Malabo Convention, the African Continental Free Trade Area (AfCFTA), and the Digital Transformation Strategy for Africa. Participants noted areas of alignment between the national and continental frameworks but also identified gaps in the national data governance framework

As such, effort went into mapping out where Lesotho is already aligned with the AUDPF and which specific areas need to be prioritised in revising the country’s legal and policy framework. Recommendations from this mapping exercise included establishing an independent Data Protection Commission, clarifying categories of personal and sensitive data, improving inter-agency coordination, and investing in digital literacy and data privacy skills across the public and private sectors. 

The workshop was complemented by a strategic stakeholder survey to assess perceptions on Lesotho’s data governance framework. The survey revealed a minimal understanding of the country’s data governance frameworks. Over half of the respondents stated that existing policies were outdated and unable to address current challenges such as cross-border data flows, cloud computing, and evolving digital privacy threats. Respondents identified digital trade, innovation, health research, and public trust as key benefits of robust data governance. Responses further emphasised the importance of inclusive policymaking, public awareness on data governance campaigns in both English and Sesotho, alongside targeted support for rural and marginalised communities. 

By the conclusion of the meeting, participants had agreed on a national data governance strengthening roadmap. With contributions coming from the broad spectrum of participants, who included Princess Senate Mohato Seeiso, through to Principal Secretary Kanono Leronti Ramashamole of the MICSTI, who noted that “data is no longer a by-product of administration but a strategic national asset”, the meeting reinforced the value multistakeholderism holds in digital governance. 

Undeniably, no single institution can carry the policymaking load by itself. The real story from Maseru is the multistakeholder collaboration, with the MICSTI anchoring at home, the AUDA-NEPAD and AU-GIZ bringing continental scaffolding, civic and technical communities translating frameworks into practice, and a steady emphasis that data governance has to work for everyone. Ultimately, this process could enable Lesotho to not just catch up with the AUDPF, but to help show what a people-centred, innovation-friendly data ecosystem looks like in the region. 

As regional leaders in digital rights and digital governance, CIPESA is committed to providing continued support to Lesotho as it works to reform its policies and institutionalise stronger data governance mechanisms. Our involvement helps to ensure that national efforts are grounded in best practices and aligned with continental and global standards, such as those set by the African Union.

CIPESA Welcomes Namibia Ministry of ICT and the Namibia IGF as Co-Hosts of FIFAFrica25

By FIFAfrica |

The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is pleased to announce that the 2025 edition of the Forum on Internet Freedom in Africa (FIFAfrica25) will be co-hosted in partnership with the Namibian Ministry of Information and Communication Technology (MICT) and the Namibia Internet Governance Forum (NamIGF).

Set to take place in Windhoek, Namibia, from September 25–27, 2025, this year’s Forum will serve as yet another notch in FIFAfrica’s 12-year history of assembling digital rights defenders, policymakers, technologists, academics, regulators, journalists, and the donor community, who all have the shared vision of advancing internet freedom in Africa.

With its strong commitments to democratic governance, press freedom, and inclusive digital development, Namibia offers fertile ground for rich dialogues on the future of internet freedom in Africa. The country holds a powerful legacy in the global media and information landscape, being the birthplace of the 1991 Windhoek Declaration on promoting independent and pluralistic media. In a digital age where new challenges are emerging – from information integrity and Artificial Intelligence (AI) governance to connectivity gaps and platform accountability – hosting FIFAfrica in Namibia marks a key moment for the movement toward trusted information as a public good, including in the digital age.

“Through the Ministry of Information and Communication Technology, Namibia is proud to co-host FIFAfrica25 as a demonstration of our commitment to advancing technology for inclusive social and economic development. This Forum comes at a critical moment for Africa’s digital future, and we welcome the opportunity to engage with diverse voices from across the continent and beyond in shaping a rights-respecting, secure, and innovative digital landscape,” Minister of Information and Communication Technology (ICT), Emma Inamutila Theofelus

This sentiment is shared by the NamIGF Chairperson, Albertine Shipena. “We are honoured to co-host the FIFAfrica25 here in Namibia. This partnership with MICT and CIPESA marks a significant step in advancing digital rights, open governance, and meaningful multistakeholder engagement across the continent. As the NamIGF, we are proud to contribute to shaping a more inclusive and secure internet ecosystem, while spotlighting Namibia’s growing role in regional and global digital conversations.”

The NamIGF was established in September 2017, through a Cabinet decision, as a multistakeholder platform that facilitates public policy discussion on issues pertaining to the internet in Namibia.

Dr. Wairagala Wakabi, the CIPESA Executive Director, noted that FIFAfrica25 presents a timely opportunity to advance progressive digital policy agendas that uphold fundamental rights and promote digital democracy in Africa. “As global debates on internet governance, data sovereignty, and platform accountability intensify, it is essential that Africans inform and shape the frameworks that govern our digital spaces. We are honoured to partner with the Namibian government and NamIGF to convene this critical conversation on the continent,” he said.

Since its inception in 2014, FIFAfrica has grown to become the continent’s leading assembly of actors instrumental in shaping conversations and actions at the intersection of technology with democracy, society and the economy. It has become the stage for concerted efforts to advance digital rights and digital inclusion. These issues, and new emerging themes such as mental health, climate and the environment, and the content economy, will take centre stage at FIFAfrica25, which will feature a mix of plenaries, workshops, exhibitions, and a series of pre-events.

Meanwhile, FIFAfrica will also recognise the International Day for Universal Access to Information (IDUAI), celebrated annually on September 28. The commemoration serves to underscore the fundamental role of access to information in empowering individuals, supporting informed decision-making, fostering innovation, and advancing inclusive and sustainable development – tenets which resonate with the Forum. This year’s celebration is themed, “Ensuring Access to Environmental Information in the Digital Age”.

At the heart of the Forum is a Community of Allies that have, over the years, stood alongside CIPESA in its pursuit of effective and inclusive digital governance in Africa.

Feedback on Session Proposals and Travel Support Applications

All successful session proposals and travel support applicants have been contacted directly. See the list of successful sessions here. Thank you for your patience and for contributing to what promises to be an exciting FIFAfrica25.  

Prepare for FIFAfrica25: Travel and Logistics

Everything you need to plan your attendance at the Forum can be found here – visit this page for key logistical details and tips to help you make the most of your experience!

Advancing Respect for Human Rights by Businesses in Uganda

CIPESA |

In partnership with Enabel, the European Union, and the Uganda Ministry of Gender, Labour, and Social Development, the Collaboration on International ICT Policy for East and Southern Africa (CIPESA) is implementing “The Advancing Respect for Human Rights by Businesses in Uganda (ARBHR) project”. Launched in November 2024, the project seeks to among others reduce human rights abuses connected to business activities in Uganda, particularly those impacting women and children.

With a focus on Uganda, the project is being implemented in the regions of Busoga (Iganga, Mayuge, Bugiri, and Bugweri), Albertine (Hoima, Kikuube, Masindi, Buliisa, and Kiryandongo) and Kampala Metropolitan (Kampala, Mukono, and Wakiso). While working in these regions, CIPESA is enhancing awareness on business and human rights concerns through evidence based advocacy, sensitisation campaigns, reporting and redress mechanisms, as well as through  public and private sector policy dialogues.

More details about the project can be found here.

Connecting Business to Digital Rights

Many Ugandan businesses, particularly small and medium enterprises (SMEs), lack a comprehensive understanding of digital rights principles and their obligations in upholding them. A significant portion of Uganda’s population lacks access to the internet and modern digital technologies, limiting the reach and impact of digital rights initiatives. 

According to the telecommunications regulator, as of June 2023, Uganda had a total of 34.9 million telephone subscriptions which translates to a 77% penetration rate. At 27.7 million internet subscriptions, internet penetration is at 61%. According to a 2018 nation-wide survey by the National Information Technology Authority of Uganda (NITA-U), 76.6% of respondents named high cost as the main limitation to their use of the internet. The same reason was reported in the 2022 survey, which also cited the rural-urban divide (84.9% vs 92.1% vs) and a gender gap (84.6% female and 89.6% male) in mobile phone ownership. 

Businesses often prioritise short-term economic gains over long-term investments in responsible digital practices such as data privacy and user security. The existence of insufficient digital infrastructure, especially in rural areas, hampers the effective implementation and enforcement of digital rights protections. Businesses face increasing cybersecurity threats that compromise data privacy and other digital rights, necessitating robust security measures.

Related reading: See this commentary on the Future of work in Uganda: Challenges and Prospects in the Context of the Digital Economy

#BeeraSharp Campaign

The #BeeraSharp (“be smart” in Luganda) campaign is our response in addressing the gaps that Ugandan businesses face when navigating digital rights, online spaces and digital data. It aims to fill key knowledge gaps on the understanding of business legal obligations through adopting secure and ethical digital practices to build a smarter, safer, and more resilient business ecosystem in Uganda.