AdvocatesConnect (U) Limited maintains the following records under the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021. These documents describe how personal data is processed, the risks involved, and the safeguards in place.
Record of Processing Activities (RoPA)
v1.0 · 5 Nov 2026
Covers payroll, matter records, and the client portal under Regulation 6.
DPIA — Payroll Processing
v1.0 · 5 Nov 2026
Data protection impact assessment for the HR payroll module.
DPIA — Cross-Border Hosting
v1.0 · 5 Nov 2026
Assessment of hosting outside Uganda under Regulation 19 safeguards.
Data Processing Agreement
v1.0 · 5 Nov 2026
Downloadable DPA for firms to accept. Acceptance is recorded separately from your subscription.
Sub-processor list
The live list of hosting providers, payment processors, and email providers — with their regions and DPA status — is published in the platform footer and managed in our vendor register. We give at least 14 days' notice before adding or replacing a sub-processor.