{"id":"https://openalex.org/W7225105779","doi":"https://doi.org/10.5281/zenodo.23878777","title":"Data Privacy and Information Security Practices in Organizations in Uganda: An integrative narrative review and proposed implementation framework","display_name":"Data Privacy and Information Security Practices in Organizations in Uganda: An integrative narrative review and proposed implementation framework","publication_year":2026,"publication_date":"2026-11-02","ids":{"openalex":"https://openalex.org/W7225105779","doi":"https://doi.org/10.5281/zenodo.23878777"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23878777","doi":"https://doi.org/10.5281/zenodo.23878777","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23878777","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"review","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23878777","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160385210","display_name":"KENNETH KABUGO","orcid":"https://orcid.org/0009-0004-2229-8626","observed_orcids":["https://orcid.org/0009-0004-2229-8626"]},"institutions":[{"id":"https://openalex.org/I2752562790","display_name":"Kampala International University","ror":"https://ror.org/017g82c94","country_code":"UG","type":"education","lineage":["https://openalex.org/I2752562790"]}],"countries":["UG"],"is_corresponding":true,"raw_author_name":"KABUGO, KENNETH","raw_affiliation_strings":["Kampala International University"],"raw_orcid":"https://orcid.org/0009-0004-2229-8626","affiliations":[{"raw_affiliation_string":"Kampala International University","institution_ids":["https://openalex.org/I2752562790"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5160385210"],"corresponding_institution_ids":["https://openalex.org/I2752562790"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.6093999743461609,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.6093999743461609,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3499000072479248,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.023000000044703484,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-privacy","display_name":"data privacy","score":0.9990000128746033},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.9819999933242798},{"id":"https://openalex.org/keywords/privacy-governance","display_name":"privacy governance","score":0.9860000014305115},{"id":"https://openalex.org/keywords/information-security-management","display_name":"information security management","score":0.902999997138977},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"privacy by design","score":0.5400000214576721},{"id":"https://openalex.org/keywords/data-protection-law","display_name":"data protection law","score":0.8199999928474426},{"id":"https://openalex.org/keywords/uganda","display_name":"Uganda","score":0.5080000162124634},{"id":"https://openalex.org/keywords/implementation-science-frameworks","display_name":"implementation framework","score":0.6010000109672546},{"id":"https://openalex.org/keywords/employee-capabilities","display_name":"employee capabilities","score":0.6190000176429749},{"id":"https://openalex.org/keywords/outsourcing","display_name":"outsourcing","score":0.8209999799728394},{"id":"https://openalex.org/keywords/accountability","display_name":"accountability","score":0.7070000171661377},{"id":"https://openalex.org/keywords/compliance","display_name":"compliance","score":0.45100000500679016},{"id":"https://openalex.org/keywords/technical-control","display_name":"technical control","score":0.6489999890327454},{"id":"https://openalex.org/keywords/operational-resilience","display_name":"operational resilience","score":0.6859999895095825},{"id":"https://openalex.org/keywords/information-lifecycle","display_name":"information lifecycle","score":0.5759999752044678},{"id":"https://openalex.org/keywords/data-protection-impact-assessment","display_name":"data protection impact assessment","score":0.44999998807907104}],"concepts":[{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.5839999914169312},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5422000288963318},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4927000105381012},{"id":"https://openalex.org/C189922023","wikidata":"https://www.wikidata.org/wiki/Q17056348","display_name":"Information governance","level":4,"score":0.47690001130104065},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.45660001039505005},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.454800009727478},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.44850000739097595},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4334000051021576},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.41530001163482666},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.38580000400543213},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.38339999318122864},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.3716999888420105},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.36559998989105225},{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.33000001311302185},{"id":"https://openalex.org/C196879817","wikidata":"https://www.wikidata.org/wiki/Q872685","display_name":"Data governance","level":4,"score":0.3188999891281128},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.31290000677108765},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.31279999017715454},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.31189998984336853},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3075999915599823},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3057999908924103},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.2994000017642975},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.2890999913215637},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.28279998898506165},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.28040000796318054},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.27309998869895935},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.26510000228881836},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.26429998874664307},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.2628999948501587},{"id":"https://openalex.org/C128487930","wikidata":"https://www.wikidata.org/wiki/Q579488","display_name":"Information management","level":2,"score":0.26089999079704285}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23878777","doi":"https://doi.org/10.5281/zenodo.23878777","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23878777","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.23878778","doi":"https://doi.org/10.5281/zenodo.23878778","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23878778","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23878777","doi":"https://doi.org/10.5281/zenodo.23878777","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23878777","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8999999761581421,"display_name":"Peace, justice, and strong institutions"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7223565033","https://openalex.org/W7223228106","https://openalex.org/W6941245353","https://openalex.org/W2557827829","https://openalex.org/W4283079098","https://openalex.org/W2944840873","https://openalex.org/W7137894085","https://openalex.org/W2946832056","https://openalex.org/W2139283408","https://openalex.org/W7223087713"],"abstract_inverted_index":{"Data":[0],"privacy":[1,35,87,192],"and":[2,58,72,99,113,159,165,171,183,193,212,224],"information":[3,38,200],"security":[4,39,194],"are":[5,20],"closely":[6],"related":[7],"organizational":[8,89,169],"responsibilities,":[9],"yet":[10],"securing":[11],"a":[12,139,184],"database":[13],"does":[14],"not":[15,84,137],"establish":[16],"that":[17,191],"its":[18],"contents":[19],"collected,":[21],"used":[22],"or":[23,144],"retained":[24],"appropriately.":[25],"This":[26],"article":[27,150],"examines":[28],"how":[29],"organizations":[30],"in":[31],"Uganda":[32],"can":[33],"integrate":[34],"governance":[36],"with":[37,168,221],"management.":[40],"A":[41],"structured":[42],"narrative":[43],"review":[44,223],"brings":[45],"together":[46],"selected":[47],"Ugandan":[48,129],"empirical":[49,70],"studies,":[50],"international":[51],"behavioural":[52],"research,":[53],"Uganda's":[54],"data":[55],"protection":[56,209],"legislation":[57],"recognized":[59],"management":[60],"frameworks.":[61],"The":[62,149,188],"analysis":[63],"distinguishes":[64],"legal":[65],"requirements,":[66],"framework":[67,154],"recommendations,":[68],"reported":[69],"associations":[71],"the":[73,106,199],"article's":[74],"own":[75],"conceptual":[76],"propositions.":[77],"Five":[78],"findings":[79],"emerge:":[80],"technical":[81,160,226],"controls":[82,122],"do":[83,136],"resolve":[85],"all":[86],"risks;":[88],"commitment":[90],"must":[91],"be":[92,116,196],"translated":[93],"into":[94],"verifiable":[95],"routines;":[96],"employee":[97],"capability":[98,158],"workable":[100],"procedures":[101],"influence":[102],"compliance;":[103],"outsourcing":[104],"changes":[105],"allocation":[107],"of":[108,120,147,210],"tasks":[109],"without":[110],"eliminating":[111],"accountability;":[112],"implementation":[114,186],"should":[115,195,217],"assessed":[117],"through":[118],"evidence":[119,134,181],"operating":[121],"rather":[123],"than":[124],"policy":[125],"possession":[126],"alone.":[127],"Existing":[128],"studies":[130],"provide":[131],"useful":[132],"sector-specific":[133],"but":[135],"support":[138],"single":[140],"national":[141],"compliance":[142],"estimate":[143],"causal":[145],"ranking":[146],"interventions.":[148],"proposes":[151],"an":[152,180],"integrated":[153],"linking":[155],"governance,":[156],"human":[157],"safeguards":[161],"to":[162],"responsible":[163],"processing":[164,172],"operational":[166],"resilience,":[167],"resources":[170],"context":[173],"as":[174],"conditioning":[175],"factors.":[176],"It":[177],"also":[178],"develops":[179],"matrix":[182],"phased":[185],"approach.":[187],"conclusion":[189],"is":[190],"coordinated":[197],"across":[198],"lifecycle":[201],"while":[202],"retaining":[203],"distinct":[204],"tests":[205],"for":[206],"lawful":[207],"processing,":[208],"individuals":[211],"service":[213],"continuity.":[214],"Future":[215],"research":[216],"combine":[218],"staff":[219],"accounts":[220],"document":[222],"proportionate":[225],"verification.":[227]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-11-03T00:00:00"}