Data Protection Officers Convene to Strengthen Privacy Leadership on International Data Privacy Day

By Anitah Ahebwa |

Data Protection Officers (DPOs) from across the country gathered at Four Points by Sheraton, Kampala, on Wednesday, 28 January 2026, for a masterclass aimed at strengthening strategic data protection leadership. Organised by the Personal Data Protection Office (PDPO) in partnership with the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), the event marked the annual International Data Privacy Day and focused on helping DPOs balance compliance, risk, and business needs within their organisations.

While giving opening remarks at the masterclass, Baker Birikujja, the National Personal Data Protection Director, highlighted the everyday realities of personal data protection.

“Some of the most damaging privacy incidents do not begin with hackers,” he said. “They begin with a printed report left on a desk, a patient file discussed in an open corridor, an unlocked cabinet, or a phone call handled without discretion. Personal data exists not only online, but on paper, in recordings, photographs, CCTV footage, and everyday conversations and it deserves the same discipline and respect wherever it sits.”

He added that modern privacy management is not merely a file of policies. “It is a system of decisions, behaviors, controls, and accountability,” he said, noting that effective data protection requires attention to both digital environments such as databases, apps, and cloud services, and physical or offline environments, including paper records, filing systems, CCTV, and call recordings.

Edrine Wanyama, Programme Manager Legal at CIPESA, noted that the partnership with the PDPO was driven by a shared commitment to building strong and effective collaborations in data governance and protection. “We believe in building good partnerships, and we have actively leveraged and worked through these processes to buttress efforts,” he said. He added that data protection is central to CIPESA’s work.

He further noted that marking International Data Privacy Day through the workshop was intentional, explaining that the masterclass was designed to enhance knowledge of Data Protection Officers and build their capacity to effectively respond to emerging data protection risks and take appropriate actions

Edrine Wanyama, Programme Manager, Legal at CIPESA, explained why CIPESA partnered with PDPO; “We believe in building strong partnerships and have leveraged these collaborations over time. Data protection is central to what we do, and data is critical because it relates directly to individuals.”

He also highlighted that the timing of the masterclass on International Data Privacy Day was intentional. He noted that the workshop was designed to bring Data Protection Officers together to not only acquire knowledge but also build their capacity to effectively do their work.

The masterclass featured three key sessions. The first explored the evolving role of the DPO as a strategic advisor, covering legal mandates, independence, and repositioning from a compliance officer to a trusted advisor. The second session focused on applying a risk-based approach to data protection, helping DPOs identify high-risk processing activities, prioritise compliance actions, and use risk assessments to guide management decisions. The final session addressed balancing compliance, risk, and business needs, equipping DPOs with strategies to advise leadership in clear business language, support innovation, and document recommendations effectively.

The sessions come against a backdrop of broader challenges for DPOs in Uganda. A recent PDPO training needs assessment conducted by the PDPO in November 2022, revealed that around 90.6% of DPOs lack formal certification in data protection and privacy, and only a small proportion have technical or legal backgrounds. Many officers are also less involved in core compliance tasks such as audits, breach reporting, and managing data protection complaints. These findings highlight the continued importance of professional development and knowledge-sharing forums like this masterclass.

By convening DPOs on International Data Privacy Day, PDPO and CIPESA emphasised the need for proactive privacy leadership in safeguarding personal data and maintaining public trust. Participants were equipped with practical tools to advise management, manage data protection risks, and integrate privacy considerations into organisational practices.

The masterclass is part of PDPO’s ongoing efforts to foster a culture of responsible data governance in Uganda, ensuring that personal data protection extends beyond regulatory compliance to build public confidence in the country’s growing digital economy.

Following the sessions, participants agreed on collective actions to:

  • Prioritise privacy-by-design and continually engage in robust cybersecurity practices aimed at protecting and securing individuals’ personal data.
  • Develop internal data protection policies to guide the implementation of data practices and ensure personal data protection.
  • Keep abreast of technological developments, including AI, and ensure minimisation of risks associated with it for progressive data protection.
  • Conduct staff and customer tailored trainings and raise awareness amongst them on data protection and the need to safeguard their data.
  • Ensure that as DPOs, they take on pivotal leadership over data protection to ensure compliance with the data protection principles and protection of data protection rights.
  • Hold all perpetrators of data breaches accountable for their actions in order to deter any further similar breaches by errant data controllers and processors.
  • Conduct regular data mapping and maintain up-to-date records of processing activities to understand what data is in their possession and how to rightly handle it in the changing technological and business spaces.
  • Foster collaboration across teams and recognise that privacy cannot be managed in isolation but through joint responsibility and efforts.
  • Recognise their central role in the compliance and reporting function to ensure the establishment of safeguards that protect their organisations from reputational, legal, and financial harms.

Please see an emerging press release here.

Navigating The Aftermath of Uganda’s Internet Shutdown

By Juliet Nanfuka |

After nearly five days without public internet access, connectivity in Uganda has been partially restored. On January 13, 2026, the government ordered internet service providers to block public access to the internet, with partial access being reinstated late at night on January 17, 2026. Social media and messaging platforms remain restricted as of January 19, 2026. Officials said the move was aimed at curbing the spread of online misinformation, electoral fraud, and incitement to violence in the lead-up to the polls. The order also halted the sale and registration of new SIM cards and blocked outbound data roaming services to One Network Area countries. Some essential services including healthcare systems at national referral hospitals, financial services including core banking and interbank systems, immigration and electoral commission secure portals, utilities management, and aviation and railway control systems were to remain accessible according to the directive. Thus, the country went to the polls in the midst of a “digital darkness”. The controversial election has seen Yoweri Museveni extend his 40 year rule by another five years following the announcement of his win.

Various human rights groups and election monitoring groups, including the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), African Commission on Human and Peoples’ RightsAfrican Freedom of Expression Exchange (AFEX), Access Now, Human Rights Watch and the UN Human Rights Office of the High Commissioner documented the shutdown and challenged the government’s position on blocking access to the internet. They argue that access to information and freedom of expression are especially critical during elections and that the blanket shutdown undermined election transparency and accountability.

While the restoration of internet access brings an end to the total blackout, it leaves behind pressing questions about the cost of restricting access to the internet during democratic processes and what such measures mean for civic participation, transparency, and accountability in Uganda.

The evolution of internet shutdowns during elections in Uganda reveals a pattern of escalation. During the 2016 elections, authorities limited restrictions to primarily social media platforms over four days during elections and again during the presidential inauguration. In 2021, initial block of social media platforms  were followed by a complete internet shutdown which saw access to digital communication affected for a total of five days. This month’s polls witnessed a complete shutdown from just before the onset of the elections, reflecting the control of state power over digital infrastructure.

Prior to the shutdown, the services of satellite internet provider Starlink, which operates independently of terrestrial networks, were halted in Uganda after a regulatory directive, rendering all Starlink terminals inactive ahead of polling day.  Starlink was providing services without a valid local license. Critics argued that the directive served to limit alternatives for connectivity in the event of broader restrictions, feeding anxieties about reduced access to independent channels of information.

Away from restrictions to online connectivity, state power has also been reflected in the tight control over media narratives, undermining its watchdog role. This has been witnessed through restricting the live broadcast of “riots, unlawful processions, or violent incidents” and the barring of journalists from the privately owned Nation Media Group-Uganda from covering Museveni’s campaign and events since March 2025, in addition to denying them access to parliament since October 2025. Meanwhile, there were various assaults and the intimidation of journalists in an effort to “silence scrutiny of public affairs”.

The electoral process itself has been marred by controversy including queries on the failure of the Biometric Voter Verification Kits (BVVKs) on voting day resulting in voter apathy and delays. The Electoral Commission’s spokesperson acknowledged that some aspects of the BVVK such as voter verification did require internet access to function. The contingency measure provided was the manual verification of voters at polling stations. The state made a total investment of approximately 469.5 billion Uganda Shillings (UGX) (USD 131.9 million) in December 2025 to support what was considered critical preparatory activities for the just concluded general election. Of this investment, at least UGX 53.8 billion (USD 15.1 million) was dedicated to the BVVK.

Further, the earlier suspension of various non-governmental organisations and the arrest and intimation of various state critics including Dr. Saarah Bireete on charges of unlawful access to voters’ register data, and Dr. Kizza Besigye on charges of treason,  reflected a narrowed democratic space in the lead up to and during the election. These actions were often accompanied by announcements of protecting national security, managing disinformation, and maintaining public order.

The internet shutdown also affected daily livelihoods of millions of ordinary people within Uganda as it  severed access to basic online interactions including checking up on friends and family. It also affected formal and informal sector transactions through mobile money, digital marketplaces, and online channels that traders, boda boda riders, market vendors, gig workers, freelancers, and small-scale entrepreneurs use to conduct commerce, advertise and deliver services. In many cases, these workers were forced to revert to cash-based transactions, exposing them to heightened insecurity, loss of business, and reduced earnings. For others, such as ride hailing applications, online purchases and delivery sections, economic activity stalled altogether.

News reports state that many actors in the financial sector remained tight lipped about their possible losses following the shutdown. According to the Uganda Revenue Authority, the state lost income due to the internet shutdown affecting revenue collections – the deadline for filing monthly tax returns fell within the shutdown on January 15. The landlocked country further lost tax revenue clearance costs paid in by trucks at the various border points while tourism was also affected. The shutdown also affected mobile money services upon which millions of Uganda’s informal sector rely on. Cash withdrawals using the service were also blocked.

The events surrounding Uganda’s internet shutdown highlight the tension between the state, media, civil society, and the rights of citizens at critical moments such as elections. This tension also affects access to information, freedom of expression and the tenets of digital democracy. It undermines accountability and transparency in democratic processes paving the way for abuse, violations and impunity. Ultimately, internet shutdowns raise questions about whether such measures are necessary or proportionate particularly at a time when digital platforms have become the basis of livelihoods, civic engagement and basic services for millions of people who engage directly online and at the periphery of digital access, including those who are not online, digitally savvy or even have the devices to access the digital society.

Uganda’s case is not isolated as the country joins numerous others who in recent months have ordered shutdowns around election periods, protests, and national exams, when authorities perceive digital communication as a threat to public order. In the last 12 months, internet shutdowns have been seen across the continent including during elections in Tanzania and Cameroon, conflict in eastern Democratic Republic of the Congo, a military coup in Guinea-Bissau, and environmental protests in Equatorial Guinea’s Annobón island.

Uganda’s Election and the Lingering Legacy of Internet Blockage

By Juliet Nanfuka |

In two days, as Uganda heads to its presidential and parliamentary elections slated for January 15, 2026, citizens, civil society actors, journalists, and digital rights defenders were stumped with the question, “will they shut down the internet again?” Or, this time, will we see a commitment to adherence to one of the basic fundamentals of digital democracy and have an election in which access to digital communications remains open?  

In recent weeks, anxiety about an impending internet blackout has surged despite Dr. Aminah Zawedde, Permanent Secretary of the Ministry of ICT and National Guidance, and Hon. Nyombi Thembo, Executive Director of the Uganda Communications Commission (UCC), dismissing rumours of plans to shut down the internet, calling them “false and misleading”.

However, for many, these pronouncements have done little to quell suspicions, especially due to the actions witnessed during the 2016 and 2021 elections. During those previous two elections, access to digital communications was restricted, resulting in a block to online communication, commerce, and key avenues for civic engagement.

Various actions in the lead up to the polls have also served to compound the suspicions. In a report issued in January 2026, the United Nations Office of the High Commissioner for Human Rights (OHCHR) describes the arrests of state critics as “arbitrary and discriminatory” and outside of the country’s constitutional guarantees.

Despite the strong constitutional protection of rights, the human rights situation in Uganda during the period under review has been characterized by increasingly restrictive legislation and their arbitrary and discriminatory application. The Government of Uganda has continued to rely on legislation such as the Public Order Management Act (POMA), the Anti-Terrorism Act, the NGO Act, the Computer Misuse (Amendment) Act and the Penal Code Act to shrink civic and democratic space and further weaken political participation, particularly of political opponents and their supporters, as well as the work of civil society, including journalists and human rights defenders.” OHCHR Report on Uganda

Meanwhile, independent media has come under increasing pressure, experiencing various forms of clampdowns in the lead up to the elections, including the denial of advertising spend. In October 2025, independent outlets – NTV Uganda and The Daily Monitor – were denied accreditation to cover parliamentary and presidential proceedings. Reports of harassment, equipment confiscation as well as attacks on journalists during election campaign coverage, and raids on media offices, have been commonplace – underscoring a deteriorating environment for media freedom.

Meanwhile the satellite internet provider Starlink, which has services that can operate independently of terrestrial networks, was halted in Uganda after a regulatory directive in early January 2026, rendering all Starlink terminals inactive ahead of polling day. The satellite internet service provider was providing  services without a valid local license. Critics still argue that the directive serves to limit alternatives for connectivity in the event of broader restrictions on internet access, feeding anxieties about reduced access to independent channels of information.

The UCC has also come under fire following its warning to broadcasters and digital content creators against live coverage of riots, protests, or incidents that could disrupt public order. The regulator stated that only the Electoral Commission may declare election results, and sharing unverified results is illegal. Dr. Zawedde stated, “Media platforms must not be abused to incite violence, spread misinformation, or undermine the credibility of the electoral process.”

By the afternoon of January 13, 2026, a directive circulating online had been issued by UCC to mobile network operators to block public access to the internet, effective at 18:00.

In a public statement, Access Now and the global #KeepItOn coalition had urged President Yoweri Museveni and relevant national authorities to ensure unrestricted internet access throughout the electoral period and to refrain from any disruptive measures that impede the free flow of information. The statement stresses the fundamental role that connectivity plays in inclusive participation, freedom of expression, and the credibility of the electoral process.

Likewise, the African Commission on Human and Peoples’ Rights (ACHPR) also reaffirmed that internet access is a core human right and a necessary condition for free and fair elections, warning against restrictions that would stifle civic space. The Commission called on the Government of Uganda to ratify the African Charter on Democracy, Elections and Governance, signed on January 27, 2013, which emphasises the importance of a culture of peaceful change of power based on regular, free, fair and transparent elections conducted by competent, independent and impartial electoral bodies.

For democracy to flourish in Uganda, authorities must demonstrate their commitment to open digital spaces. This means not only publicly guaranteeing uninterrupted internet access before, during, and after the elections but also building trust through transparency and accountability.  Citizens deserve to communicate freely, monitor the electoral process, and hold all actors accountable without fear of arbitrary disruption.

Ultimately, Uganda’s electoral credibility will not be judged by what happens at polling stations, but by whether the state resists the temptation to control information by disrupting digital access. In an era where civic participation, journalism, election transparency, and even livelihoods heavily rely on digital access, a disruption would signal a fear of accountability.

If the government chooses restraint in the coming hours, it would mark a major departure from a troubling past and offer Ugandans a rare assurance in the election process. If it does not, history will record yet another election where the digital access was shut down to presumably manage dissent rather than protect democracy.

Dr. Karen Smit

Who is Dr. Karen Smit?

I am a mother, wife, sister, expert, and a professional with a disability who has dedicated my life to advocating for the inclusion of persons with disabilities in Africa. My lived experience has shaped my worldview and strengthened my commitment to social justice, particularly in advancing digital inclusion, so that persons with disabilities can fully enjoy their human rights and access opportunities. For 28 years, I have worked at Vodacom, driving disability inclusion and influencing systemic change.

I have been married to my wonderful husband for 31 years, and being a mom reminds me every day that miracles do happen.

My journey as a disability and digital rights advocate began shortly after completing my undergraduate studies in the 1990s, when I realised the power of using my voice to make a meaningful difference in people’s lives. I completed my MA in Social Work at the University of Stellenbosch, where I identified barriers to employment for individuals with disabilities and provided guidelines for line managers on the successful recruitment of candidates with disabilities.

The turning point came when I experienced the enabling role of technology firsthand. Becoming a user of accessible technology revealed its power to open doors, level the playing field, and create opportunities. This realisation fueled my passion to drive accessibility and digital inclusion across Africa. My vision is clear: I want all Africans with disabilities to fully participate in the digital society and economy – accessing opportunities, resources, and becoming active citizens who contribute to economic empowerment.

Over the past 28 years at Vodacom [in South Africa], my advocacy has deepened significantly as I pushed for inclusive innovations. The company’s senior leadership created a platform that empowered me to champion inclusion for employees and consumers with disabilities. The unwavering support of Vodacom’s Group CEO and senior leaders has been transformative – shifting the focus from a “tick-box” approach to embedding inclusion systemically into the company’s technology, products, services, and processes, in alignment with Vodacom’s Purpose Strategy.

Having worked for Vodacom for many years and being responsible for driving the accessibility agenda for consumers with disabilities sparked my interest in pursuing a PhD in disability studies, with a focus on developing a Framework for promoting the digital inclusion of disabled consumers that companies can implement.

There has been some progress in expanding digital rights and inclusion for persons with disabilities in Africa, but it remains limited. In many ways, we are still only scratching the surface. I am, however, encouraged that some countries are taking active steps to promote disability inclusion, which is a positive sign. Most African nations have disability legislation and regulations in place, which is commendable.

However, the real challenge lies in implementation and creating real impact. Progress is slow, and without effective enforcement and commitment, transformation stalls, leaving behind many persons with disabilities.

Vodacom markets have several disability inclusion initiatives, including creating inclusive workplaces, accessible contact (customer service) centres, and retail stores offering multiple communication channels for persons with various disabilities. Additionally, digital centres provide smartphones and digital skills training to organisations for persons with disabilities.

The company also provides text Emergency Services for Deaf, hard-of-hearing, and persons with speech disabilities, accessible apps such as M-Pesa and VodaPay for visually impaired users, [it] hosts the annual Africa Accessibility conference, and offers tailor-made packages for disabled contract users, as well as training for store consultants.

Furthermore, the African Union (AU) Protocol to the African Charter on Human and Peoples’ Rights (ACHPR) on the Rights of Persons with Disabilities in Africa recently came into effect to protect and promote the rights of persons with disabilities across Africa. In 2025, Kenya enacted a progressive Persons with Disabilities Act, 2025 (Act No. 4 of 2025), marking a major milestone in disability inclusion and rights protection.

Research indicates that there are several barriers that persons with disabilities face, such as affordability, a lack of digital skills, and limited access to devices. Women with disabilities and those in rural areas face compounded barriers due to cultural norms, infrastructure gaps, and affordability challenges.

Meanwhile, with the emergence of new technologies, intentional efforts must be made to ensure that Artificial Intelligence (AI) systems are not trained on biased datasets that fail to represent persons with disabilities. Innovators must prioritise accessibility when designing solutions for smart cities, environmental sustainability, safety, security, and tourism.

To stay ahead, we must involve the disability community at every stage – from the conceptualisation of innovations to implementation – ensuring their voices shape innovation. This transforms persons with disabilities from passive beneficiaries into active partners and co-creators of solutions for a barrier-free Africa.

To build trust, foster partnerships, and strengthen regional collaboration among African stakeholders in the disability rights movement, it is essential to create a unified ecosystem that drives systemic change. These actors must recognise that disability is a natural part of the human experience and that exclusion stems from societal barriers, not just individual limitations. When these barriers are removed, persons with disabilities can fully exercise their rights and participate equally in all aspects of life.

Efforts to promote digital rights and inclusion in Africa must intentionally address how disability intersects with other marginalised identities – such as women, youth, and older persons – so that no one is left behind. Women with disabilities represent more than half of all persons with disabilities worldwide, and yet they continue to face numerous barriers, including being less likely to hold leadership roles, to be employed, to use the internet, and to experience barriers to sexual and reproductive healthcare. Their voices and specific needs must be prioritised and integrated into every stage of innovation and policy development to ensure an inclusive society for all.

Samantha Sibanda

Who is Samantha Sibanda?

I am a human rights advocate and survivor of mental health issues who has dedicated the past decade of her life to championing the rights of persons with disabilities. In 2014, I founded the Signs of Hope Trust, an organisation for persons with disabilities, which focuses on access to information, digital rights, and inclusion, as well as inclusive civic engagement and public finance management.

I am also a trainer in the Freedom of Information Act, selected by the Zimbabwe Media Commission to support government entities and the public in understanding the Act and improving transparency and accessible information practices. My advocacy work is grounded in the principles of Ubuntu, which utilise community-driven and collaborative approaches to achieve change.

My motivation to work on disability and digital rights stems from a combination of personal experience and what I’ve observed in my own community. As a survivor of mental health challenges, I was drawn into advocacy through my own journey, and I continue to support community-based rehabilitation and mental health champions in my work.

As for digital rights, it grew naturally from my work at Signs of Hope Trust. For many years, we shared information via WhatsApp and other platforms to bridge information gaps for persons with disabilities. However, at the peak of the COVID-19 pandemic, between 2020 and 2021, the disability digital divide became more apparent. Everything shifted to online, including education, communication, and public services, and many individuals with disabilities were left behind due to inaccessible technologies, limited data, or a lack of access to devices.

That moment pushed me to focus intentionally on digital inclusion. We also added Digital Rights as a core programming area at Signs of Hope Trust, and I have continued to champion this work from the grassroots level, where our communities are most affected.

There have been tremendous efforts to expand digital rights and inclusion for persons with disabilities in Africa. The digital divide related to disabilities has become a key topic at most digital rights convenings that I have been privileged to attend. Regionally, the AfricanUnion (AU) Protocol to the African Charter on Human and Peoples’ Rights (ACHPR) on the Rights of Persons with Disabilities in Africa came into force in May 2024, reinforcing the legal basis for accessible ICT [Information and Communications Technology], barrier-free access to communication systems, and the right to information.

Alongside this, more organisations are adopting accessibility standards, governments are integrating disability inclusion into national digital strategies, and communities are increasingly vocal about the need for accessible online services. While gaps remain, the momentum is good, and the conversation is shifting from awareness to implementation.

I want to commend CIPESA for developing the Disability& ICT Accessibility Framework Indicators. I have personally used these in our research in Zimbabwe, and I have seen more studies that have used them.  This is a crucial tool for data-driven advocacy and enhancing access to ICT for persons with disabilities.

Additionally, Universal Service Funds are increasingly being used to finance assistive technologies and expand connectivity, while community-based efforts, such as community networks supported by the Internet Society, are bringing internet access to remote areas. In Zimbabwe, there are community information centres which provide shared devices, internet connectivity, and training spaces for persons with disabilities who may not have individual access. Lastly, emerging satellite internet solutions, such as Starlink, are bringing reliable internet access to remote areas.

These innovations, when combined with accessible design, digital literacy programmes, and advocacy for inclusive policy, are creating practical pathways for persons with disabilities to participate fully in the digital world.

There are several pressing challenges that threaten digital rights and inclusion for persons with disabilities in Africa. One emerging concern is the rise of Artificial Intelligence (AI) tools, such as generative AI chatbots and image generators, which can reproduce harmful biases and create misinformation that is difficult to fact-check. This disproportionately affects persons with disabilities, who often lack access to digital literacy and critical information verification skills. Information disorders, including deepfakes and manipulated content, further exacerbate these risks.

Ableism remains another persistent barrier, carried into online spaces and contributing to self-censorship or exclusion of persons with disabilities from digital participation. It also shapes whose voices are considered in policymaking, often leaving persons with disabilities sidelined in laws and digital governance.

I often reference the seven pillars of inclusion, and when contextualised to digital rights, several stand out. First, inclusive policy frameworks must provide tangible ways to embed the needs of these groups into national and regional digital strategies and practices. Communication should be accessible, transparent, timely, multilingual, and adaptable to diverse abilities, ensuring that information reaches everyone.

Offering choice in how people engage digitally allows communities to use tools and platforms that best suit their needs. Building strong partnerships across government, civil society, industry, and community networks amplifies impact and accountability. Accessibility must be prioritised in both digital content and devices, ensuring that platforms are usable by all. Web accessibility guidelines should be applied when developing websites to ensure they are accessible to all users.