Technology & Communications News
More newsTo register or not to register: The Ugandan Personal Data Protection Office’s decision on the registration of data controllers
On 18 July 2025, Uganda’s Personal Data Protection Office (PDPO) delivered a decision that could reshape how multinational entities approach data protection in Uganda. The PDPO found that Google LLC (Google) was in breach of Uganda’s Data Protection and Privacy Act of 2019 (DPPA) for failing to register as a data controller or data collector and for failing to demonstrate adequate safeguards in its cross-border transfer of personal data belonging to Ugandan data subjects.
Webinar Recording | AI on Trial Navigating legal risks in the age of AI
Watch our team of experts as they discuss the intersection of law and AI and the opportunities it offers.
Implications of processing the personal data of former employees for commercial purposes
Employers typically rely either on employee consent or the necessity for contractual performance (or both) as a basis for lawfully processing their employees’ personal data. However, certain legal questions arise where an employer continues to process an employee’s personal data after the termination of the employment contract. Is such post-employment processing of personal data permitted under the law? If so, can the post-employment processing be carried out for commercial purposes? What restrictions does the law provide in relation to such processing of personal data?