Uganda Marks International Data Privacy Day with DPOs Masterclass

Uganda joined the rest of the world in marking International Data Privacy Day with a Data Protection Officers’ (DPOs) Masterclass convened by the Personal Data Protection Office (PDPO) in partnership with CIPESA Uganda.

The session brought together Data Protection Officers from different sectors to reflect on the evolving role of privacy professionals and to strengthen their capacity to move beyond technical compliance into strategic organizational leadership.

The Masterclass focused on positioning DPOs as key contributors to decision-making, risk management, and sustainable business growth, rather than limiting their role to regulatory box-ticking.

Speaking during the session, Baker Birikujja highlighted that some of the most serious privacy breaches are not caused by cyberattacks but by everyday human actions.

“Some of the most damaging privacy incidents do not begin with a hacker. They begin with a printed report left on a desk, a patient file discussed in an open corridor, a visitor register exposed at reception, an unlocked cabinet, a USB moved just for convenience, a CCTV feed accessed casually, or a phone call handled without discretion,” Birikujja said.

He reminded participants that personal data exists in many forms and deserves equal protection regardless of format.

“Personal data is not only online. It exists on paper, in registers, filing cabinets, recordings, photographs, CCTV footage and even in everyday conversations, and it deserves the same discipline and respect wherever it sits,” he added.

Also speaking at the event, Mrs. Barbra Among Arinda, Executive Director of the Credit Reference Bureaus Association Uganda Ltd, emphasized the strategic importance of the Data Protection Officer role within organizations.

“A Data Protection Officer is a strategic advisor. Your role is to advise management on compliance matters, risk mitigation and recommendations while preserving business revenue and integrity,” she said.

She encouraged DPOs to bridge the gap between regulation and operations by translating legal and regulatory risks into practical business impact.

The Masterclass marked a significant step in reinforcing Uganda’s commitment to data protection and privacy, while empowering professionals to safeguard personal data in both digital and physical environments.