Uganda’s digital economy is expanding rapidly, but with that growth comes an alarming surge in cybercrime, data breaches, and privacy violations that are increasingly putting businesses, startups, financial institutions, and consumers at risk.
In response, the National Information Technology Authority – Uganda (NITA-U), in partnership with the Personal Data Protection Office (PDPO), has launched the “Beera Ku Guard” campaign, a six-month nationwide initiative designed to raise awareness and strengthen cybersecurity, data protection, and privacy compliance across the country.
Launched at the Serena Hotel in Kampala, the campaign, whose name translates to “stay guarded and on the lookout,” targets 70% of Uganda’s technology users through a multi-channel strategy spanning TV, radio, social media, digital platforms, and institutional engagements.
The aim is to empower citizens, businesses, and organizations to take greater responsibility for protecting personal and organizational data in an increasingly digitized environment.
Arnold Mangeni, Director of Information Security at Personal Data Protection Office (PDPO), noted that Uganda’s growing reliance on mobile money, e-commerce, and digital services has created both opportunities and vulnerabilities.
“We have launched the Beera Ku Guard campaign to promote awareness about cybersecurity, data protection, and privacy risks, so that consumers and businesses can harness the positives of technology while avoiding the threats and dangers that come with it,” Mangeni said.
He revealed that Uganda Police crime reports indicate a significant increase in online fraud and mobile money scams, with many cases going unreported due to fear and stigma. “Cybercrime is costing Ugandans billions every year,” he explained, adding that the campaign encourages vigilance and responsible digital practices to minimize risks.
The digital economy is now central to Uganda’s transformation agenda under the National Development Plan IV (NDP IV), but experts warn that without adequate safeguards, cyber threats could undermine innovation and investor confidence.
Geraldine Mugumya, a Risk Analyst at NITA-U, emphasized the growing need for organizations to comply with the Data Protection and Privacy Act, which sets strict obligations on how personal data is collected, stored, and processed.
“Organizations must have the right policies in place, train staff who handle client information, and ensure that sensitive data is properly protected and destroyed when no longer needed,” Mugumya explained.
She cautioned businesses, especially banks, fintech firms, schools, hospitals, and e-commerce platforms, that non-compliance carries heavy penalties, including fines, lawsuits, license revocations, and reputational damage.
“Consumers trust companies with their personal information, and any misuse or breach can be catastrophic. Protecting customer data is not just a legal requirement but a business imperative,” she stressed.
For many Ugandan businesses, cybersecurity risks stem not only from external attacks but also from human behavior within organizations.
Paul Kakeeto, the Project Lead for ‘Beera Ku Guard’and the Manager Public Relations and Marketing Affairs PDPO highlighted the growing problem of negligence among employees and customers.
“Every day we share personal information from hospital registration forms and school enrolments to mobile money transactions and job applications. Yet many people don’t realize how vulnerable this data is,” Kakeeto said.
He recounted cases of CVs and academic documents ending up on the streets, used as wrapping material for snacks, after being carelessly discarded by companies. “Businesses must take responsibility for safeguarding the data they collect and dispose of it safely when it is no longer useful,” he added.
The campaign also targets Ugandan startups, fintech innovators, and IT firms, positioning cybersecurity as an emerging opportunity rather than just a challenge. With the country aiming to become a regional tech hub, demand for secure payment gateways, data encryption tools, and compliance consultancy services is expected to grow significantly.
Industry analysts predict that Uganda’s cybersecurity market, along with East Africa’s, will expand rapidly over the next five years, fuelled by increased investment in digital infrastructure and rising awareness among businesses and consumers.
Yet, the success of Uganda’s digital transformation depends heavily on consumer trust. Henry Kimera, Chief Executive of the Consumer Education Trust (CONSENT), emphasized that personal data is now one of the most valuable assets individuals possess.
“Your information is your life, your wealth, and your heritage. If you handle it carelessly, you endanger yourself, your family, and your business,” he said.
Kimera warned that many Ugandans are unknowingly exposing themselves to identity theft, financial fraud, and privacy violations through social media oversharing, unsafe online transactions, and weak security practices.
The ‘Beera Ku Guard’ campaign also focuses on protecting vulnerable groups, particularly children, whose personal data is frequently mishandled by schools, parents, and institutions.
Mugumya stressed that under the Data Protection and Privacy Act, processing children’s data requires additional layers of consent and security.