Data Protection and Privacy Act, 2019, children and special personal data

Data Protection and Privacy Act, 2019, ss. 8-9 (children and special personal data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 3 May 2019.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

Do not collect or process a child's personal data unless the child's parent, guardian, or another person with authority to decide for the child has given prior consent, or the collection or processing is necessary to comply with the law or is for research or statistical purposes.
Do not collect or process personal data about an individual's religious or philosophical beliefs, political opinion, sexual life, financial information, or health status or medical records, unless a listed exception applies.
Where a listed exception permits it, collect or process that special personal data only under an employer's legal right or duty, with the data subject's free consent, or as a non-profit political, philosophical, religious or trade union body processing its own members' or contacts' data without disclosing it to a third party without their consent.

What it reaches

Obligation class

Prohibition, Consent

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Section 8 bars a person from collecting or processing a child's personal data unless it is carried out with the prior consent of the child's parent, guardian or another person with authority to decide for the child, or is necessary to comply with the law, or is for research or statistical purposes.

Section 9(1) bars a person from collecting or processing personal data relating to an individual's religious or philosophical beliefs, political opinion, sexual life, financial information, or health status or medical records, and section 9(2) exempts information collected under the Uganda Bureau of Statistics Act from that bar.

Section 9(3) permits collection or processing of that special personal data only where it is exercised or performed under a right or obligation a law imposes on an employer, where the data subject gives it freely and with consent, or where a non-profit political, philosophical, religious or trade union body collects or processes it for its own legitimate activities about its own members or regular contacts and does not disclose it to a third party without the data subject's consent.

The enumerated special-category list does not name biometric or genetic data, so a biometric identifier is not treated as special personal data under this Act.

When LexLint raises it

crawls_web
trains_models
serves_minors
handles_health_records
high_risk_decisions

Read the law

official Act text as published by the Uganda Legal Information Institute (ULII), preserved in an Internet Archive capture of the ULII page

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2024. Publisher's page: https://ulii.org/en/akn/ug/act/2019/9/eng@2019-05-03

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app