Computer Misuse Act, 2011, unauthorised access
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
Struck down: invalidated by a court, effective 15 April 2011.
A computer misuse rule binding public and private bodies.
As of 5 September 2026.
What it requires
- This provision is not currently enforceable: Uganda's Constitutional Court declared the Computer Misuse (Amendment) Act, 2022 void for lack of parliamentary quorum and permanently enjoined enforcement of section 11 on 17 March 2026.
- Before this ruling, the section made it an offence to access, intercept, or cause a computer to output another person's program or data without authorisation, whether or not the person accessed the data for a scraping or training purpose.
If you get it wrong
Criminal exposureYes
Private right of actionNo
Criminal exposure note
Before being struck down, the offence carried a fine of up to 750 currency points (UGX 15,000,000) or imprisonment of up to ten years, or both, on conviction (s. 11(7) as renumbered by the 2022 amendment; s. 12(4) as originally enacted).
Penalty structure
The cap that applied under section 11 before it was struck down on 17 March 2026; the provision currently carries no operative penalty because its enforcement is permanently enjoined.
- Rule
- Fixed only
- As of
- 5 September 2026
- Currency
- UGX
- Fixed cap
- 15,000,000
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
As originally enacted, section 12 (renumbered section 11 by the Computer Misuse (Amendment) Act, 2022) made it an offence to access or intercept another person's program, data or information without authorisation, and the 2022 amendment added voice or video recording of another person and sharing information about another person without authorisation to the same offence, carrying a fine of up to 750 currency points (UGX 15,000,000) or imprisonment of up to ten years, or both.
On 17 March 2026, in a consolidated ruling on three petitions filed in 2022, Uganda's Constitutional Court held that the Computer Misuse (Amendment) Act, 2022 was passed without the quorum of one-third of all members required by the Rules of Procedure of Parliament and Articles 88 and 89 of the Constitution, and separately found section 11, along with sections 23 and 26 to 29, vague, overbroad and inconsistent with the constitutional guarantees of freedom of expression and access to information.
The court declared the Computer Misuse (Amendment) Act, 2022 null and void and issued a permanent injunction restraining its enforcement of section 11, so no unauthorised-access offence under this Act currently binds a person accessing a computer system in Uganda.
When LexLint raises it
crawls_webtrains_models
Read the law
official Act text as published by the Uganda Legal Information Institute (ULII), preserved in an Internet Archive capture of the ULII page
the 17 March 2026 ruling is sourced to contemporaneous Ugandan and international press coverage rather than the Constitutional Court's own judgment text