The National Identification and Registration Authority (NIRA) has moved to reassure Ugandans of the security and integrity of the National Identification Register (NIR) following recent public concerns about data safety.
In a press release, NIRA emphasised that personal and biometric data remain confidential, secure, and intact, with strong technical, legal, and institutional safeguards in place. The Authority reiterated its commitment to continuous system upgrades to meet global best practices, warning that any employee found unlawfully disclosing personal data would be punished.
The statement comes amid media reports linking some officials to alleged misconduct in sharing personal data. NIRA said it is cooperating fully with the Uganda Police and the Data Protection Office to ensure accountability and transparency in line with the Data Protection and Privacy Act.
Legal and Technical Safeguards
The Authority explained that data protection is anchored in the Registration of Persons Act (ROPA) and the Data Protection and Privacy Act, which strictly define how personal information is collected, stored, and accessed. Under these laws, unauthorised access, disclosure, or misuse of personal data attracts severe penalties, including prosecution.
On the technical side, NIRA said all data is encrypted, stored in secure government-controlled data centres, and protected by role-based access controls to prevent unauthorised use. Advanced intrusion detection and monitoring systems have also been deployed to safeguard against cyber threats.
Institutional Measures in Place
NIRA has appointed a dedicated Data Protection Officer to oversee compliance, monitor internal practices, and coordinate with the Data Protection Office. Staff are also required to sign confidentiality and non-disclosure agreements, while regular training on data privacy and ethics is mandatory.
Other measures include internal governance policies, independent oversight mechanisms, and routine audits to ensure accountability. The Authority noted that only authorised officials can access the National ID database, and all access attempts are logged and monitored.
NIRA pledged to maintain transparency and collaboration with civil society and stakeholders to protect the integrity of Uganda’s identity system. “We remain committed to securing citizens’ personal data and strengthening public trust in the National Identification Register,” the statement concluded.