Uganda — Data Protection and Privacy Act, 2019

The DPPA and its regulations set out principles for lawful processing, give special protection to sensitive personal data such as health records, grant individuals rights over their data, and require controllers and processors to safeguard the data they hold.

The DPPA is overseen by the Personal Data Protection Office (PDPO) under NITA-U. Controllers and processors may be required to register with the PDPO. Teliyadu's security controls and audit records support these obligations.

• Encryption everywhere — TLS 1.2+ for data in transit and AES-256 for data at rest.
• Strict tenant isolation — each clinic's records live in their own private database schema, never in shared tables.
• Role-based access control (Admin, Dentist, Receptionist, Dental Assistant) so staff only reach the data their role needs.
• Audit logging of every access to patient records and financial data.
• Hosting on AWS in the EU (Frankfurt, eu-central-1) with automated, encrypted daily backups.
• We never use your patients' data to train third-party AI models, and we never sell it.

Your clinic is the data controller for the patient information it stores in Teliyadu OralOS — you decide why and how it is processed. Teliyadu acts as a data processor, handling that information only on your documented instructions and only to provide the service. A data processing agreement (DPA) setting out these responsibilities is available on request.

Individuals have rights to access, correct and request deletion of their data, and to object to processing. Teliyadu OralOS helps your clinic honour them.

To ask a data-protection question, or to make a request on behalf of a patient, email support@teliyadu.com and we'll route it to the right person.