The Institute for AI Policy and Governance (AIPG) welcomes a major development in digital governance on the African continent. An official communication from the Republic of Uganda’s Ministry of ICT and National Guidance, dated 24 November 2025, confirms that Google LLC has formally withdrawn its appeal in the landmark matter of Ssekamwa Frank & 3 Others v. Google LLC.
The Ministry’s letter states that Google, through its legal representatives, informed the government on 5 November 2025 that it had withdrawn the appeal lodged against the ruling of the Personal Data Protection Office (PDPO). The letter further confirms that Google has undertaken to address all issues raised in the PDPO’s decision, including those relating to registration and cross-border data transfers.
This marks a historic milestone for digital rights and regulatory authority in Africa. It is one of the clearest and most decisive instances of a global technology company conceding to an African data-protection ruling and committing to comply with domestic law.
A Strengthened Precedent for African Data Protection Frameworks
The PDPO’s decision found Google to be in breach of Uganda’s Data Protection and Privacy Act and required the company to:
- register as a data controller and data collector in Uganda;
- designate a Data Protection Officer; and
- provide documentary evidence of compliant cross-border data-transfer safeguards.
Google’s withdrawal of its appeal transforms this ruling from a regulatory order into a continental precedent, demonstrating a shift in meaningful compliance from multinational technology firms. It signals a maturing digital governance landscape in which domestic data-protection laws have both legitimacy and enforceability.
Relevance for Africa and Emerging AI Education Initiative across the Continent
This development comes at a crucial time for Ghana, Kenya and several African states. Google is currently rolling out free AI and cloud-learning programs targeting university students across the continent. These initiatives require students to submit personal data for online registration, status verification, analytics, and platform engagement.
Under Ghana’s Data Protection Act, 2012 (Act 843), global technology companies processing the personal data of Ghanaian residents, regardless of physical presence, are required to:
- register as data controllers or processors;
- appoint certified and qualified data supervisors to monitor compliance;
- ensure data is processed for specific and legitimate purposes
- ensure lawful cross-border transfers; and
- uphold data-subject rights, consent, transparency, and security obligations.
Uganda’s confirmed enforcement provides a strong foundation for Ghanaian authorities, universities, and civil society to ensure that global platforms operating student-facing AI programmes comply fully with national law.
AIPG’s Position
AIPG views Uganda’s enforcement action and Google’s withdrawal of its appeal as a defining moment for Africa’s digital future. The Institute calls for:
- strengthened regulatory coordination across African states;
- consistent enforcement of data protection obligations for global technology companies;
- transparent data-management practices in student-facing AI and digital learning programmes;
- appointment of responsible data and AI-compliance officers by global platforms operating in Ghana and the wider region; and
- continued vigilance over cross-border data flows.
Africa’s data-protection regimes are gaining traction, and this case stands as a compelling example of how regulatory institutions can serve their purpose in an increasingly digitised and AI-mediated world.
AIPG remains committed to advancing responsible AI governance, data sovereignty, and equitable digital transformation.
Institute for AI Policy & Governance 