We deliver a range of programmes and services designed to build lasting data protection capacity across East Africa. Some of these services are offered on a fee basis to support organisations directly and to help fund our broader public-interest work; others, such as community awareness initiatives, are offered freely as part of our core mission.
Data Protection & Privacy Support
Practical, hands-on support to help your organisation navigate day-to-day data protection challenges.
DiscoverData Protection Advisory & Compliance Reviews
In-depth reviews to assess, strengthen, and evidence your organisation's data protection compliance.
DiscoverData Protection & Privacy Support
Our team can offer support in the following areas:
- Compliance Support: Guidance and practical solutions to help organisations navigate and comply with the applicable data protection framework in Uganda, Kenya, Tanzania, Rwanda, Burundi or South Sudan.
- Breach Support: Support with managing personal data breaches in line with regulatory requirements.
- Subject Access Request (SAR) Advice: Practical guidance on handling subject access requests.
- Data Protection Impact Assessment (DPIA): Guidance to support data protection compliance when implementing new processes or technologies.
- Reviewing and Developing Policies and Procedures: Support with reviewing internal and customer-facing policies and procedures.
- Contract Review: Review and recommendations relating to data sharing and processor agreements.
- Legal Research: Tailored research to address specific data protection queries and scenarios.
Data Protection Advisory & Compliance Reviews
We offer a range of advisory services to help organisations assess and strengthen their compliance with data protection laws and standards. Our reviews cover:
- Data Processor Due Diligence: Assessment of data processors, including documentation reviews and process checks, to confirm that adequate technical and organisational security measures are in place.
- DPIA as a Service: A full Data Protection Impact Assessment service, including analysis and guidance, or carrying out DPIAs on an organisation's behalf.
- RoPA Review and Compilation: Review and analysis of Records of Processing Activities (RoPAs), or support in developing RoPAs tailored to an organisation's needs.
- Data Mapping: Support to map data flows within an organisation and provide clarity on how personal data moves and is used.
- Document Review for Legal Compliance: Review of documentation to check alignment with applicable data protection laws and standards.
- Privacy Information Review: Review of privacy information and management processes to ensure alignment with relevant data protection laws.
DPO Support Services
A Data Protection Officer does not need to be a full-time employee, and in many cases an organisation benefits from drawing on a team like ours for this role. Our Data Protection Officers bring experience across the data protection frameworks applicable in East Africa. For organisations with their own DPOs, our team is also available as a support network for collaborative discussion, research and guidance. Our DPO support services include:
- Reviewing documentation, such as policies and procedures, and supporting on-site visits to monitor working practices.
- Providing training and raising awareness on data protection issues and priorities.
- Carrying out or advising on DPIAs, security incident investigations, or data subject rights requests.
- Advising on processor contracts and data sharing agreements, and conducting periodic compliance reviews.
- Preparing periodic compliance assurance reports for senior management.
- Liaising with, and representing organisations before, the relevant data protection authority and data subjects.
- Testing information security controls.
Data Protection Training
We deliver training through our dedicated training team, virtually, in hybrid format, or in person.
Bespoke & Organisational Training
Much of our training is tailored to individual clients. Below is a selection of our standard programmes – if you don't see what you're looking for, please get in touch:
- Data Champions Training: Equips staff with the skills to champion data protection within their organisation, building a culture of compliance and promoting best practice.
- Personal Data Breaches Management Training: Covers legal obligations, response protocols, and strategies to minimise the impact of breaches, helping organisations prepare and respond effectively.
- Board Member Responsibilities and Compliance Leadership: Equips board members with the knowledge to oversee data protection within their organisation, supporting compliance with applicable data protection laws and fostering a culture of privacy.
- An Introduction to Data Protection: Provides a foundational understanding of data protection principles and regulations to support effective handling of personal information.
Public Awareness Programmes
Free or low-cost community sessions, webinars and outreach activities aimed at raising public understanding of data protection rights and responsibilities. These activities reflect our core mission and are supported, in part, by income from our advisory and training services.