Uganda
Uganda Recording Laws: Consent Rules and Penalties (2026)

Uganda regulates phone and radio call recording under an explicit one-party consent statute, but the offence that once covered general in-person recording was struck down for a procedural defect in March 2026, leaving no dedicated criminal rule for recording a person face to face.
Recording Phone and Radio Calls: The One-Party Consent Rule
Uganda's clearest rule on recording sits in the Regulation of Interception of Communications Act (RICA), Chapter 101 (2010). Section 2(1)(a) states that a person shall not intercept a communication transmitted by a telecommunication or radio communication system unless they are a party to the communication, have the consent of the sender or recipient, or are authorised by warrant. That is a straightforward one-party consent rule: if you are on the call, you may record it, and no second party's agreement is legally required.
RICA's definition of "intercept" is written broadly enough to cover recording directly. Section 1 defines it as listening to, recording, reading or copying the contents of a communication, in whole or in part. Recording a phone or radio call you are not a party to, and have no consent to capture, falls squarely inside that definition.
Unauthorised interception under RICA is a criminal offence. Section 2(3) sets the penalty at a fine of up to 120 currency points, imprisonment of up to five years, or both.
Lawful interception outside the one-party exception is tightly centralised. Under ss.3(4) and 4(1)-(2), the Monitoring Centre is the sole facility through which authorised interceptions may be carried out, and warrant applications may be brought only by the Chief of Defence Forces, the Director Generals of the External or Internal Security Organisations, or the Inspector General of Police, before a designated judge. RICA also requires telecom providers to register subscriber identity information, including a six-month SIM registration window for existing subscribers at commencement (s.9).
The Computer Misuse Act: Two Separate Rulings, Correctly Dated
Online summaries frequently claim that "section 11 of the Computer Misuse Act" was struck down and treat that as the end of recording law in Uganda. That claim conflates two different provisions and two different court rulings, and getting the distinction right matters.

The ORIGINAL Computer Misuse Act, 2011 (Act 2 of 2011), s.11, is titled "Production order." It is a procedural provision letting an investigative officer apply to court for an order compelling a person to produce data or subscriber information for a criminal investigation. It has nothing to do with recording, and it was never struck down; it remains in force as originally enacted.
A different, recording-specific offence was inserted later by the Computer Misuse (Amendment) Act 2022, which added new provisions criminalizing unauthorised access, interception of data, and voice or video recording of another person. In the post-amendment consolidated numbering, that inserted offence occupied the "section 11" slot, which is almost certainly the source of the conflation.
On 17 March 2026, the Constitutional Court of Uganda, ruling on Constitutional Petitions No. 34, 37 and 42 of 2022 (consolidated), nullified the entire Computer Misuse (Amendment) Act 2022, voiding the amended provisions at ss.11, 23, 26, 27, 28 and 29, including the recording-specific offence. The court's ground was procedural: Parliament passed the amendment without verifying that the constitutionally required quorum was present, contrary to Articles 88-89 of the Constitution. It was not a ruling that non-consensual recording is constitutionally protected, and it says nothing about privacy or free expression as applied to recording. A future Parliament could re-pass a similar recording offence through a properly quorate vote, and it would likely stand.
A separate and earlier ruling addressed a different section entirely. On 10 January 2023, in Karamagi and Another v Attorney General, Constitutional Petition No. 5 of 2016, [2023] UGCC 2, the Constitutional Court struck down s.25 ("Offensive communication") of the original 2011 Act as vague, overbroad and unconstitutional under Article 29(1)'s free-expression guarantee. That is substantive reasoning about a different offence, decided three years before the 2026 ruling, and it should not be merged into the same narrative.
The March 2026 ruling reportedly also struck down the Penal Code Act's criminal libel provisions (ss.162-163) in the same judgment, but on substantive free-expression grounds rather than the procedural reasoning used for the Computer Misuse Amendment Act. The court used different legal reasoning for different statutes within a single ruling, which underlines that the 2026 outcome was not a single sweeping privacy or speech holding.
A sourcing limitation to disclose plainly: the underlying Constitutional Court judgment PDFs for both the January 2023 and March 2026 rulings could not be accessed directly (blocked on the court's public repository). The account of the March 2026 ruling above is drawn from a directly reviewed news report and an NGO policy analysis, not the judgment text itself, and should be treated as reported rather than as read from the primary source. Both were verified as current on 2026-07-27. This is a fast-moving area; an appeal by the Attorney General or fresh legislation reinstating a recording offence is plausible, and the position could change without notice.
The Current Gap for General In-Person Recording
With the 2022 Amendment Act nullified, Uganda currently has no in-force statute that specifically criminalizes recording another person or an in-person conversation without their consent. That absence is the honest finding here, not a gap in research. Two general, non-recording-specific layers remain relevant.
The Data Protection and Privacy Act, 2019 (Act 9 of 2019), s.7, requires the prior consent of a data subject before their personal data is collected or processed, subject to exceptions for legal authorisation, public duty, national security, criminal investigation, contractual necessity, medical purposes and other legal obligations. Section 2 defines consent as a freely given, specific, informed and unambiguous indication of the data subject's wishes, given by statement or clear affirmative action. A recording that captures another person's voice or image could fall within this consent requirement, but the Act is a general data-protection statute, not a recording-specific criminal law, and it is enforced through the regulatory scheme rather than as a standalone recording offence.
Article 27 of the Constitution of the Republic of Uganda, 1995, protects against unlawful search or entry and against interference with the privacy of a person's home, correspondence, communication or other property. It is a broad constitutional guarantee rather than a rule that resolves specific recording scenarios.
Penalties for Unlawful Interception and Data Misuse
| Offence | Penalty | Source |
|---|---|---|
| Unauthorised interception of a telecom or radio communication | Fine up to 120 currency points or imprisonment up to 5 years, or both | RICA 2010, s.2(3) |
| Unauthorised access or interception of computer data | Fine up to 240 currency points or imprisonment up to 10 years, or both | Computer Misuse Act 2011, s.12(7) |
| Unauthorised interception of a computer service via an electro-magnetic, acoustic or mechanical device | Up to 240 currency points or 10 years (360 points / 15 years on repeat); 168 points / 7 years if damage results | Computer Misuse Act 2011, s.15 |
| Unlawful obtaining or disclosure of personal data | Fine up to 240 currency points or imprisonment up to 10 years, or both | DPPA 2019, s.35 |

The s.12 and s.15 Computer Misuse Act penalties above concern unauthorised access to and interception of computer data and computer services, not the general in-person recording offence that was nullified in March 2026. They remain part of the original 2011 Act and were not affected by that ruling.
Recording as Evidence in Uganda
The Computer Misuse Act 2011, s.29, addresses the admissibility of electronic evidence: a data message or electronic record is not to be excluded from proceedings merely because it is electronic or not in its original form, subject to ordinary authenticity and best-evidence rules. That provision speaks to how a recording might be used once it exists, not to whether making it was lawful. It was part of the original 2011 Act's provisions in this area, distinct from the recording-consent question addressed above.

Beyond s.29, no other Ugandan admissibility rule for recordings could be independently confirmed. Readers relying on a recording as evidence, whether from a phone call, a workplace dispute, or elsewhere, should raise the specific circumstances with a lawyer familiar with Ugandan civil or criminal procedure before assuming a recording will be accepted.
What This Article Could Not Establish, and Where Care Is Needed
The Regulation of Interception of Communications Act governs telecommunications and postal interception and does not reach CCTV, and no separate rule governing CCTV or workplace monitoring was located. Institutional commentary also describes a gap in Uganda's treatment of non-consensual intimate imagery, and the position after the March 2026 ruling could not be confirmed. The judgments in both Constitutional Court rulings discussed above could not be retrieved directly, so both are described from reporting rather than from the courts' own texts.
One practical caution. Press-freedom organisations have repeatedly reported journalists being obstructed or detained while filming in Uganda. This research located those reports but could not open them, so no incident is described here in detail. The general point still holds: the statutory gap left by the March 2026 ruling is not an assurance about how filming police or protests will be treated on the ground.
Where no authority could be located, that is a statement about what is findable in public sources, not a conclusion that the conduct is permitted or prohibited. Anyone facing a specific situation should take advice from a lawyer licensed in the jurisdiction.
This article provides general legal information about recording and interception law in Uganda, not legal advice. Information was verified as current on 2026-07-27, and this is a fast-moving area where the March 2026 Constitutional Court ruling could be appealed or superseded by new legislation. For advice on a specific situation, consult a lawyer licensed to practice in Uganda. See also recording law in Kenya, Tanzania, Rwanda, and the full world recording laws hub.
Frequently Asked Questions
Can I record a phone call in Uganda if I am one of the participants?
Yes. RICA 2010, s.2(1)(a), permits interception, defined to include recording, of a telecommunication or radio communication where the person recording is a party to the communication. No consent from the other party is required under this provision.
Is it illegal to record someone in person without their consent in Uganda?
There is currently no dedicated statute that criminalizes general in-person recording without consent. The provision that had covered this, inserted by the Computer Misuse (Amendment) Act 2022, was nullified by the Constitutional Court on 17 March 2026. The Data Protection and Privacy Act 2019's general consent requirement for personal data (s.7) and the constitutional privacy guarantee (Article 27) remain the closest applicable rules, but neither is a recording-specific criminal law.
Does the March 2026 ruling mean Ugandans now have a right to record people without consent?
No. The Constitutional Court's 17 March 2026 ruling voided the Computer Misuse (Amendment) Act 2022 on a procedural ground, that Parliament passed it without a verified quorum. It was not a substantive ruling about privacy or free expression, and it did not establish a right to record without consent. A future Parliament could re-pass a similar recording offence and it would likely be valid.
What happened to section 11 of the Computer Misuse Act?
There are two different section 11s that get conflated. The original 2011 Act's s.11, 'Production order', is a procedural evidence-disclosure provision unrelated to recording and was never struck down. A separate recording-related offence, inserted by the 2022 Amendment Act, occupied the section 11 position in the amended numbering and was nullified along with the rest of that Amendment Act on 17 March 2026.
Who can lawfully intercept communications in Uganda outside the one-party exception?
RICA centralises authorised interception at the Monitoring Centre, the sole facility through which lawful interceptions may be carried out (s.3(4)). Warrants may be sought only by the Chief of Defence Forces, the Director Generals of the External or Internal Security Organisations, or the Inspector General of Police, from a designated judge (s.4(1)-(2)).
Updates
Independently fact-checked against the cited primary sources
Sources and References
- Full text of the Regulation of Interception of Communications Act, Chapter 101 (2010), including the one-party consent rule at s.2(1)(a), the definition of 'intercept' at s.1, penalties at s.2(3), and Monitoring Centre / warrant rules at ss.3-4 and 9.(media.ulii.org)
- Original enacted text of the Computer Misuse Act, 2011 (Act 2 of 2011), including s.11 (Production order), s.12 (unauthorised access/interception), s.15 (interception of a computer service), and s.29 (admissibility of electronic evidence).(media.ulii.org)
- Full text of the Data Protection and Privacy Act, 2019 (Act 9 of 2019), including the consent requirement at s.7, the definition of consent at s.2, and penalties for unlawful data handling at ss.35-36.(media.ulii.org)
- Official text of the Constitution of the Republic of Uganda, 1995, including the privacy protection at Article 27, hosted by the government's NGO Bureau.(ngobureau.go.ug).gov
- CIPESA analysis of the 10 January 2023 Karamagi and Another v Attorney General ruling striking down Computer Misuse Act 2011 s.25 (Offensive communication) on free-expression grounds.(cipesa.org)
- News report on the 17 March 2026 Constitutional Court ruling nullifying the Computer Misuse (Amendment) Act 2022 on procedural quorum grounds, the source used because the judgment PDF itself was inaccessible.(chimpreports.com)
- CIPESA's policy analysis of the March 2026 ruling, corroborating the ChimpReports account and distinguishing the procedural reasoning used for the Computer Misuse Amendment Act from the substantive reasoning used for the Penal Code criminal libel provisions in the same judgment.(cipesa.org)