Comparison of data controller and processor registration requirements in selected East African countries
| Criteria | Uganda | Tanzania | Kenya | Rwanda |
|---|---|---|---|---|
| Registration requirement | Mandatory for DCCPs | Mandatory for DCCPs | Mandatory for DCCPs | Mandatory for all intending to be a DCCP |
| Exemptions | Power to exempt after notice in gazette, but no published notices | No mention of explicit exemptions | Exemptions based on industry, data volume, nature of data and the sensitivity of data | No mention of explicit exemptions |
| Registration authority | Office of data protection | Commission for personal data protection | Commissioner for data protection | Supervisory authority of Rwanda |
| Publication of notices | No specific mention of published notices | No specific mention of published notices | No specific mention of published notices | No specific mention of published notices |
| Criteria | Uganda | Tanzania | Kenya | Rwanda |
|---|---|---|---|---|
| Registration requirement | Mandatory for DCCPs | Mandatory for DCCPs | Mandatory for DCCPs | Mandatory for all intending to be a DCCP |
| Exemptions | Power to exempt after notice in gazette, but no published notices | No mention of explicit exemptions | Exemptions based on industry, data volume, nature of data and the sensitivity of data | No mention of explicit exemptions |
| Registration authority | Office of data protection | Commission for personal data protection | Commissioner for data protection | Supervisory authority of Rwanda |
| Publication of notices | No specific mention of published notices | No specific mention of published notices | No specific mention of published notices | No specific mention of published notices |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.