Court has sentenced a Vuka Africa Ltd finance manager to a fine of Shs100,000 or, in default, to serve two months in jail after he pleaded guilty to failing to register with the Personal Data Protection Office (PDPO) before collecting and processing clients’ personal data.
The trial Grade One Magistrate, Geoffrey Akena, sitting at the Chief Magistrate’s Court of the Standards, Utility and Wildlife Division, sentenced Dennis Habu after he pleaded guilty to failure to register as a data collector, processor, and controller, contrary to Section 29(1) of the Data Protection and Privacy Act and Regulation 15 of the Data Protection and Privacy Regulations, 2021.
Mr Akena noted that the offence is common and requires deterrence, but also observed that the accused was a first-time offender who had shown remorse and had not wasted court time.
However, the court withdrew a charge of unlawful disclosure of personal data after a reconciliation agreement was presented, indicating that the complainant, Aloyo Nyeko Omega, had withdrawn interest in the matter.
During the proceedings, the State informed court that it had received a signed reconciliation agreement dated December 2, 2025, addressed to the PDPO, confirming that the complainant and Vuka Africa Ltd had reached an amicable settlement.
Magistrate Akena admitted the reconciliation letter into the record and ruled that the accused would not be required to plead to the charge of unlawful disclosure of personal data.
‘Reconciliation is admitted, and since the complainant and the accused reconciled in writing, the accused will not plead to it,’ he ruled.
The remaining count related to Vuka Africa Ltd’s failure to register with the PDPO before collecting and processing personal data.
The State told court that Habu, as finance manager and representative of the company, was responsible for ensuring compliance.
Brief facts presented in court indicated that Vuka Africa Ltd, a courier company contracted by Jumia Uganda to provide delivery services, collected customers’ personal contact details without being registered as required by law.
‘It is not in dispute that the said company at the time of the commission of the offence was not registered in the database of the PDPO as a company that collects personal data,’ the prosecution stated.
When asked whether he had heard and understood the facts, Habu responded: ‘Yes.’
Court then convicted him on his own plea of guilt.
The State noted that the offence was non-violent and that the accused had no previous criminal record. ‘The State takes cognisance of the offence which is non-violent in nature,’ the prosecutor said. ‘We pray for a punishment the court deems fit.’
In mitigation, the defence asked for leniency.
‘The accused person is remorseful, he has not wasted court’s time, and the company has since sought the required registration,’ defence counsel submitted. ‘We ask for a lenient punishment and preferably a fine within the confines of the law.’
In delivering the sentence, Magistrate Akena said court had considered the guilty plea, the accused’s remorse, and the fact that he was a first-time offender.
‘The accused has pleaded guilty. the State has indicated he is a first-time offender and it is not a violent crime, but it is a very rampant offence,’ the magistrate said.
He added that the court would show leniency. Court then sentenced Habu to three months’ imprisonment or a fine of five currency points (Shs100,000), and in default, two months in prison.
The magistrate informed the convict: ‘You have a right to appeal.’