Data Protection & Privacy Notice

Data Protection & Privacy Notice

National Information Technology Authority – Uganda (NITA-U)
Data Protection & Privacy Notice

This Privacy Notice explains how NITA-U handles personal data collected through its website (www.nita.go.ug) and associated services, in line with Uganda's Data Protection and Privacy Act, 2019, and its Data Protection and Privacy Regulations, 2021.

1. Data Controller

NITA-U is the Data Controller for personal data collected via this website. As defined under the Personal Data Protection and Privacy Act, 2019, a Data Controller is responsible for determining the purposes and methods of data processing.

2. Personal Data Collected and Processed

We collect the following personal data through our website’s “Contact Us” and complaints forms when you choose to communicate with us:

  • Contact information data which include full name, phone number, email address, and postal address of the user.
  • Demographic information data which include the location details of the user.
  • Complaint and Transaction data which includes data on products, services, providers, transaction dates, and issues experienced by the complainant or user.
  • Name
  • Email address

This data is not collected through automated means. Additional information on automated data collection can be found in our [Cookie Use Notice].

3. Purpose and Legal Basis for Processing

We process your personal data solely to respond to your queries, requests for information, or complaints submitted through the “Contact Us” or complaints form. Our legal basis for processing is legitimate interest as permitted under Regulation 10(2)(b) of the Data Protection and Privacy Regulations, 2021.

4. Data Sharing and Disclosure

NITA-U does not share personal data with third parties unless required by law.

5. Security of Personal Data

NITA-U employs robust security measures to protect personal data. Your data is stored at the Government National Data Center and safeguarded by strict technical and organizational controls, managed by our skilled support team. We adhere to the security practices outlined in the Data Protection and Privacy Regulations, including measures to prevent unauthorized access, data loss, or breaches.

6. Your Rights as a Data Subject

Under the Personal Data Protection and Privacy Act, 2019, you have the following rights regarding your personal data:

  • Right to Access: You can request confirmation on whether we hold your personal data and obtain a copy of it.
  • Right to Rectification: You can request corrections to any inaccurate or incomplete data.
  • Right to Erasure: You may request deletion of your data where permissible.
  • Right to Restrict Processing: You can request limitations on how we use your data.
  • Right to Object: You may object to processing in certain situations, such as for direct marketing.
  • Right to Data Portability: When applicable, you have the right to receive your data in a commonly used format.

To exercise any of these rights, please contact our Data Protection Officer (DPO) via dpo@nita.go.ug.

7. Data Transfers Outside Uganda

We do not transfer personal data outside Uganda without implementing adequate safeguards equivalent to the protections offered by the Data Protection and Privacy Act, 2019. Any transfers outside Uganda are subject to user consent or stringent protection measures.

8. Data Retention

Personal data provided through the “Contact Us” form is retained for six months following the resolution of the inquiry or complaint. After this period, the data is securely deleted.

9. Data Breach Notification

In the event of a data breach, NITA-U will notify the affected individuals and the relevant authorities, following the data breach notification requirements outlined in the Data Protection and Privacy Regulations, 2021.

10. Contact Information

For any inquiries or complaints regarding this Privacy Notice or your data rights, please contact our Data Protection Officer:

Data Protection Officer
National Information Technology Authority - Uganda (NITA-U)
Palm Courts, Plot 7A, Rotary Avenue (Former Lugogo Bypass)
P.O. Box 33151, Kampala - Uganda
Telephone: +256-417-801038
Email: dpo@nita.go.ug

11. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in regulations, practices, or our services. The latest version of this notice will always be available on our website. Please review this page periodically for any updates.