Skip to main content
People & firms

The WONE Global Partners in each market.

Named senior professionals, each admitted as the one firm for a service in their country, and the firms they lead.

For professional firms

Lead your service in your market.

One Partner per service, per jurisdiction, admitted by review against published criteria.

Open Partnerships→
Insights

Sourced answers on doing business across borders.

Every statement is labelled: source-checked, professionally reviewed or not yet checked, with its source and date where checked.

Ask WONE Global

Ask your question.

Answers cite WONE Global's sourced statements and show how each one was checked. Research, not advice.

Ask WONE Global→

Uganda × Technology, Data & Cyber

Technology, Data & Cyber in Uganda

Data, cyber and technology rules for running a digital business internationally. In Uganda, that means local law, local regulators and local practice, handled by a qualified professional who practises there.

Who handles this workNamed WONE Global lead
Tony Galandi KiireKampala · Uganda

WONE Global Partner · Uganda

Tony Galandi Kiire

Managing Partner · Diamond Advocates · Kampala

Tony Kiire is the Founding and Managing Partner of Diamond Advocates, where he leads the Technology, Innovation, and Intellectual Property Law practice. He is also the founder of Lawtech Associates and Consult, the comp…

  1. What happens next · 1WONE Global acknowledges your requirement and confirms what's involved.
  2. 2Diamond Advocates runs its conflict checks.
  3. 3We confirm Tony Galandi Kiire as your named lead.
  4. 4You agree scope and fees directly with the firm before work begins.
Uganda at a glanceAfrica

Kampala · Tuesday 3 November

21:57

Local time

Currency
UGX
Working week
Monday – Friday
Dialling code
+256
Region
Africa
Doing business in Uganda →

What the rules say in Uganda

Technology, Data & Cyber, the essentials

From the Uganda market guide: the points that matter most for technology, data & cyber, each with the source it was checked against.

Essentials guide · Source-checked research64% of statements checked against a source23 checked against an official source14 checked against a secondary sourceChecked 2026-10-195 held back until checked against an official source9 topics include AI-written statements, not source-checkedNot yet professionally reviewed

  • The Uganda Revenue Authority operates the Electronic Fiscal Receipting and Invoicing Solution (EFRIS), and VAT-registered persons may claim input tax only on expenses supported by e-invoices or e-receipts.

    The PwC tax administration summary notes that the authority regularly reminds taxpayers to comply with EFRIS; the 2026/27 tax amendments (PwC, Uganda - Corporate - Significant developments) set penalties of the higher of UGX 200,000 or double the tax due for failing to issue e-receipts or e-invoices.PwC Worldwide Tax Summaries · checked 2026-10-19
  • The Data Protection and Privacy Act 2019 governs the processing of personal data in Uganda.

    Applies to any person, institution or public body collecting or processing personal data in Uganda, or outside Uganda where the data relates to Ugandan citizens (section 1).Uganda Legal Information Institute (ULII) · checked 2026-10-19
  • The Personal Data Protection Office, established under the National Information Technology Authority, Uganda (NITA-U) and reporting to its Board, enforces the Data Protection and Privacy Act 2019.

    The office is not under the direction or control of any person or authority (section 5(3)).Uganda Legal Information Institute (ULII) · checked 2026-10-19
  • Every person, institution or public body that collects or processes personal data must register with the Personal Data Protection Office.

    Data Protection and Privacy Act 2019, section 29 (data protection register). Regulations were gazetted in March 2021; enforcement against unregistered organisations began in January 2022.Personal Data Protection Office · checked 2026-10-19
  • A data collector, processor or controller based in Uganda that processes or stores personal data outside Uganda must ensure the destination country has adequate measures at least equivalent to the Act, or that the data subject has consented.

    Uganda Legal Information Institute (ULII) · checked 2026-10-19
  • Where a personal data breach is believed to have occurred, the data collector, processor or controller must immediately notify the National Information Technology Authority, Uganda, in the prescribed manner, and the Authority decides whether data subjects must be told.

    Data Protection and Privacy Act 2019, section 23.Uganda Legal Information Institute (ULII) · checked 2026-10-19

Read the full guide: Data protection and cyber

Scope

What the service covers here

  1. 01Map technology and data flows
  2. 02Identify privacy, cybersecurity and localisation requirements
  3. 03Review technology contracts and vendor dependencies
  4. 04Coordinate practical compliance across relevant markets

Key questions

What we will work through with you

  • What needs to be decided before technology, data & cyber work starts?
  • Who is professionally responsible in each country?
  • Which other work, such as tax or employment, must happen at the same time?
  • What information and decisions are needed from the business?

If your work involves another country or another area of expertise, WONE Global brings in the right professional and keeps all advisers informed.

WONE Global Intelligence

Ask about technology, data & cyber in Uganda

Ask in your own words. Answers come from WONE Global's checked records, with every source shown, and end with the named Partner who can act. Go deeper on any point, or build a decision file.

Contact WONE Global

Discuss Technology, Data & Cyber in Uganda.