Jurisdiction guide
Compliance in Uganda: what you must do, and in what order.
Regulatory infrastructure for Ugandan fintechs, digital asset businesses, and the international companies entering the market.
Regulatory map
Who regulates what in Uganda
- Key regulators
- Bank of Uganda, CMA Uganda, PDPO, FIA
- Central bank
- the Bank of Uganda
- Securities regulator
- CMA Uganda
- Financial intelligence unit
- the Financial Intelligence Authority
- Data protection authority
- the Personal Data Protection Office
- Privacy law
- the Uganda Data Protection and Privacy Act 2019
- Payment licence categories
- payment system operator and payment service provider licences under the NPS Act
- Digital asset framework
- Bank of Uganda guidance and CMA Uganda's approach to virtual assets
Licensing
The licensing route
Bank of Uganda payment systems licensing under the NPS Act, CMA approvals, PDPO registration, and AML/CFT programmes that survive an FIA review.
Why now
NPS Act licensing, PDPO registration, and FIA reporting obligations now apply to models that operated informally only a few years ago.
Entering from abroad
Entering Uganda means a Bank of Uganda licence under the NPS Act, PDPO registration, and AML/CFT reporting into the FIA.
Where to start
Fintech Compliance Health Check
See scope and price
Digital Asset Diagnostic
See scope and price
Licensing Application Sprint
See scope and price
For policy tracking and analysis of regulatory change in Uganda, read Legum Dialogue. This guide is a practical summary, not legal advice.
Legum provides regulatory and compliance advisory services. Where a matter requires licensed legal representation, we will say so clearly before work begins.