DATA PROTECTION DIGEST

Archive · July 2025

July 2025: archive

The 2 archive entries on developments from July 2025.

UG · ENFORCEMENT

Uganda's PDPO finds Google in breach and asserts extraterritorial reach

On 18 July 2025, Uganda's PDPO found Google LLC in breach of the Data Protection and Privacy Act 2019 for failing to register and for transferring Ugandan users' data abroad without adequate safeguards, ordering registration within 30 days (Ssekamwa Frank & 3 Others v Google LLC). The office rejected Google's no-physical-presence defence outright, holding that any entity collecting or processing Ugandan citizens' data falls within the Act's reach.

18 July 2025 · Enforcement
UG · ENFORCEMENT

Uganda: the Google order stands, quietly

Uganda's PDPO found in July 2025 that Google must register locally and evidence its cross-border data transfers, a finding that remains the continent's clearest extraterritoriality holding.

18 July 2025 · Enforcement