This Issue Paper examines Uganda’s legal framework on data protection and the emerging legal concerns for NGOs. The analysis provides a resource for advocacy towards avoiding the unintended consequences of an otherwise important law.