KAMPALA – As the dust settles on the 2026 General Elections, a disturbing reality is emerging regarding the intersection of technology and privacy in Uganda. A comprehensive new report by digital rights watchdog Unwanted Witness warns that the country’s most tech-heavy election cycle may have come at a steep cost to citizen privacy.

The investigation, titled “Uneven Enforcement of Data Protection Laws Puts Data Subjects’ Rights at Risk in Uganda’s 2026 Polls,” reveals a systemic failure to protect the personal information of millions. While the legal architecture for privacy exists, the report argues that enforcement has been selective, inconsistent, and dangerously weak.

A Legal Shield That Failed to Protect

Uganda did not enter the January 2026 polls without a plan. The nation had the Data Protection and Privacy Act of 2019 and the 2021 Regulations firmly in place, bolstered by international privacy standards.

However, the report describes a phenomenon where compliance was “operationally under-embedded.” In plain terms: the law looked impressive on paper, but it was largely ignored in practice.

This gap created a high-risk environment for voters. From the biometric systems used for registration to the verification of SIM cards and mobile money transactions, the 2026 cycle relied heavily on the harvesting of sensitive data.

The report warns that this lack of oversight opens the door for unauthorized access to voter registries, the misuse of biometric fingerprints, and the aggressive profiling of political opponents.

For the average citizen, the stakes are personal. A phone number, a National ID, or a facial scan could be weaponized for surveillance or intimidation without the owner’s consent or knowledge.

The Danger of Selective Justice

One of the most damning findings is the prevalence of “selective enforcement.” The report notes a jarring disparity: while some entities faced regulatory pressure, politically connected actors appeared to operate with total impunity.

This creates a tiered system of citizenship where privacy is a luxury for the powerful rather than a right for all. Does a law truly exist if it only applies to those without political influence?

The report presents a direct challenge to Uganda’s regulators, specifically the Personal Data Protection Office under the National Information Technology Authority-Uganda (NITA-U). The call is clear: move beyond “symbolic compliance” and hold every entity—including political parties and telecom giants—accountable.

Without this shift, the law risks becoming a mere public relations tool rather than a genuine shield for the populace.

A Pattern of Digital Suppression

This crisis of privacy did not happen in a vacuum. The report follows a documented four-day nationwide internet shutdown that began on January 13, 2026.

By cutting off the digital lifeline of the country during the most sensitive moments of the vote, the state not only limited access to information but also crippled the ability of citizens to hold the process accountable in real-time.

Could these two events—the failure of data protection and the internet blackout—be seen as two sides of the same coin of digital control?

The broader implications are captured in the original analysis of Uganda’s 2026 polls and their dangerous gaps in data protection, which first brought these warnings to light via Watchdog Uganda.

Ultimately, democracy cannot thrive in an atmosphere of fear. When voters believe that registering to participate in their government is an invitation to be tracked, intimidated, or profiled, the social contract is broken.

In the modern era, the act of protecting a citizen’s privacy is, in effect, the act of protecting their vote. To safeguard the data is to safeguard the democracy itself.

Disclaimer: This article discusses legal frameworks and digital rights. It is provided for informational purposes and does not constitute legal advice. For specific legal concerns regarding data privacy in Uganda, please consult a licensed legal professional.