Act
Data Protection And Privacy Act
2019
(3) Except for data collected or processed under subsection (2),
where a data subject objects to the collection or processing of
personal data, the person who is collecting or processing the personal
data shall stop the collection or processing of the personal data.
8. Personal data relating to children.
A person shall not collect or process personal data relating to a child
unless the collection or processing thereof is;
(a)
carried out with the prior consent of the parent or guardian
or any other person having authority to make decisions on
behalf of the child;
(b) necessary to comply with the law ; or
(c) for research or statistical purposes.
9.
Prohibition on collection and processing of special personal
data.
(1) A person shall not collect or process personal data which
relates to the religious or philosophical beliefs, political opinion,
sexual life, financial information, health status or medical records of
an individual.
(2) This section does not apply to information collected under
the Uganda Bureau of Statistics Act.
(3) A data collector, data processor and data controller may
collect or process personal data specified under subsection(!)
where(a)
the collection or processing of the data is in the exercise or
performance of a right or an obligation conferred or
imposed by law on an employer;
(b)
the information is given freely and with the consent of the
data subject; or