Overview:
The appointment, made under the Data Protection and Privacy Act, Cap 97, and its accompanying regulations, positions Mr. Birikujja at the helm of the Personal Data Protection Office (PDPO) — Uganda’s independent authority responsible for ensuring responsible handling of personal data and upholding citizens’ privacy rights.
The Minister for ICT and National Guidance, Hon. Dr. Chris Baryomunsi, has appointed Mr. Baker Birikujja as Uganda’s National Personal Data Protection Director, marking a major step in strengthening the country’s data privacy and digital rights enforcement framework.
The appointment, made under the Data Protection and Privacy Act, Cap 97, and its accompanying regulations, positions Mr. Birikujja at the helm of the Personal Data Protection Office (PDPO) — Uganda’s independent authority responsible for ensuring responsible handling of personal data and upholding citizens’ privacy rights.
With over a decade of experience in data privacy governance, cybersecurity, legal drafting, and regulatory enforcement, Mr. Birikujja brings both technical depth and leadership to the role. His appointment comes at a time when Uganda is expanding its digital economy and tightening its commitment to international privacy standards, following the country’s recent admission to the Global Privacy Assembly (GPA).
Mr. Birikujja previously served as Acting National Director at PDPO, as well as Manager for Compliance and Investigations, Manager for Licensing and Legal Affairs, and Manager for Legal Services at the National Information Technology Authority-Uganda (NITA-U). During his tenure, he oversaw a twofold increase in registered data controllers and processors, developed key operational frameworks, and contributed to drafting both the Data Protection and Privacy Bill and its Regulations.
He also strengthened Uganda’s regulatory cooperation with international counterparts across Africa, Europe, South America, and the Middle East, enhancing the country’s presence in global data governance discussions.
In his acceptance remarks, Mr. Birikujja pledged to “strengthen regulatory oversight” and ensure “responsible and secure handling of personal data across all sectors.”
“Some of my focus areas will be enhancing compliance, accountability, and transparency among data controllers and processors; raising nationwide awareness about privacy rights; and positioning Uganda as a trusted hub for privacy protection,” he said.
“I look forward to working with all stakeholders to build a privacy-first culture that protects individuals, promotes innovation, and drives sustainable development.”
The appointment underscores Uganda’s growing emphasis on digital trust and consumer protection, as personal data increasingly becomes central to economic activity, governance, and innovation.
About the PDPO
The Personal Data Protection Office (PDPO) is Uganda’s independent regulator mandated to implement and enforce the Data Protection and Privacy Act, Cap 97. It oversees compliance, investigates breaches, and ensures that personal data is collected and processed lawfully, fairly, and transparently.