<p><span>Data Subject Rights Under the Uganda, Kenya, Zimbabwe, South Africa and Nigerian Data Protection Regimes </span></p>

This article presents an analysis of data subject rights under the data protection regimes of Uganda, Kenya, Zimbabwe, South Africa, and Nigeria. The assessment begins by setting out the constitutional and statutory foundations of data privacy in each state, before proceeding to examine the specific procedural and substantive rights granted to individuals. These rights include the right to be informed, the right of access, the rights of rectification and erasure, the right to object to processing, and the advanced rights of data portability and protection against automated decisionmaking. The article highlights the significant statutory convergence driven by international standards such as the GDPR, while identifying critical regulatory gaps and variations among the five regimes, such as the absence of data portability in Uganda, South Africa, and Zimbabwe. Finally, the study evaluates the enforcement mechanisms, administrative complaint procedures, and civil remedies available in each country, providing concrete recommendations to harmonize regional standards, enhance regulatory interoperability, and strengthen the actual protection of data privacy rights across the African continent.