Legal requirements for running an online business in Uganda

Starting an online business can be as simple as opening a WhatsApp Business account or launching a small website. But once money starts flowing, the law expects the same things from an online seller as from a shop on Kampala Road. Understanding the legal requirements for running an online business in Uganda protects you from fines, makes it easier to open business bank accounts and payment gateways, and builds trust with customers and partners.

Important: this article is a general overview to help you ask the right questions. It is not legal or tax advice. Laws, fees and procedures change, so always confirm with the relevant authorities, a lawyer or a qualified accountant before making decisions.

1. Register your business with URSB

The Uganda Registration Services Bureau (URSB) handles business registration. You generally have two main options:

• Business name registration: suitable for sole proprietors and partnerships. It is simpler and cheaper, but you remain personally liable for business debts.
• Private limited company: a separate legal entity, which can protect your personal assets and is often preferred by corporate clients, investors and banks.

URSB provides online registration services. Start by searching and reserving your preferred name, then complete the registration forms and pay the applicable fees. Keep your certificate safe, as payment providers and banks will ask for it.

Practical steps

1. Choose a name that is not already registered and is close to your planned domain name.
2. Search and reserve the name through the URSB online system.
3. Decide on the business structure with advice from an accountant or lawyer.
4. Complete registration and obtain your certificate and registration documents.

2. Get a Taxpayer Identification Number (TIN) from URA

The Uganda Revenue Authority (URA) requires businesses to register for tax. You can apply for a TIN online through the URA portal. Once registered, you may need to consider:

• Income tax: on business profits, with different regimes depending on your size and structure. Small businesses may fall under presumptive tax arrangements.
• VAT: businesses whose turnover exceeds the threshold set in law must register for VAT and charge it on taxable supplies. Check the current threshold and rules with URA.
• Pay As You Earn (PAYE): if you employ staff, you must deduct and remit PAYE.
• Electronic invoicing: URA operates an electronic fiscal receipting and invoicing system (EFRIS), and certain taxpayers are required to issue receipts through it.
• Digital services: there have been specific tax rules affecting digital and non resident service providers, so review your position if you sell online services.

Keep proper records of sales, expenses and payments, including Mobile Money statements. A good accountant will save you more than they cost.

3. Trading licence and local authority requirements

Many businesses need a trading licence from their local authority, such as KCCA in Kampala or the relevant municipal or district council elsewhere. Even if you operate mainly online, you may need a licence for your physical premises, office or warehouse. Contact your local authority to confirm what applies to you.

4. Sector specific licences

Some products and services require special permission regardless of how they are sold. Examples include:

• Medicines and pharmacy products: regulated by the National Drug Authority and pharmacy professional bodies.
• Food and drinks: may require health and food safety approvals.
• Financial services and payments: collecting or transferring money for others is regulated by the Bank of Uganda under payment systems laws.
• Communications and broadcasting services: may fall under the Uganda Communications Commission (UCC).
• Standards: some goods must meet standards set by the Uganda National Bureau of Standards (UNBS).

If your product falls into a regulated category, speak to the regulator early.

5. Data protection and privacy

Online businesses collect a lot of personal data: names, phone numbers, email addresses, delivery locations and payment information. Uganda's Data Protection and Privacy Act, 2019 sets rules for how such data must be collected, used, stored and shared. The Personal Data Protection Office, which operates under NITA-U, oversees compliance and maintains a register of data collectors and processors.

Practical steps include:

• Check whether you need to register with the Personal Data Protection Office.
• Publish a clear privacy policy on your website explaining what data you collect and why.
• Collect only the data you need and get consent for marketing messages.
• Secure your website with SSL, strong passwords and limited staff access.
• Have a plan for responding to data breaches.

6. Electronic transactions and online contracts

Uganda's Electronic Transactions Act recognises electronic contracts and records, which means online orders and digital agreements can be legally valid. To protect both you and your customers:

• Show clear product descriptions, prices in UGX and any extra charges such as delivery.
• Publish terms and conditions of sale.
• Provide a returns and refunds policy.
• Send order confirmations and receipts.
• Display your business name, physical address and contact details.

Other laws such as the Computer Misuse Act also affect online behaviour, for example around unauthorised access and misuse of computers.

7. Consumer protection

Treat customers fairly: do not make false claims, sell counterfeit goods or hide important terms. Honour warranties and handle complaints promptly. Beyond legal compliance, fair treatment is the foundation of reputation in a market where word of mouth spreads quickly.

8. Intellectual property

Protect your brand by registering your trademark with URSB, especially if you plan to grow. Do not use other people's photos, logos, music or content without permission. Many sellers copy product photos from international websites, which can lead to copyright complaints and takedowns.

9. Domain name and hosting

Register your domain in your business name and keep the account under your control. A .ug or .co.ug domain reinforces that you are a Ugandan business. Choose a hosting provider that offers SSL, backups and responsive support, since security is part of protecting customer data. Baasa Cloud provides .ug domains, secure hosting and business email that help you look professional and stay organised.

Legal checklist for online businesses in Uganda

1. Business name or company registered with URSB.
2. TIN obtained from URA and tax obligations understood.
3. Trading licence from your local authority where required.
4. Sector licences for regulated products.
5. Data protection registration checked and privacy policy published.
6. Terms of sale and returns policy on your website.
7. Trademark considered for your brand.
8. Records of all sales and payments kept.

Frequently asked questions

Can I sell online without registering a business?

Many people start informally, but registration becomes important as you grow. Payment gateways, banks and corporate customers usually require registration documents and a TIN.

Do I pay tax on Mobile Money sales?

Business income is taxable regardless of whether it is received by cash, bank or Mobile Money. Speak to an accountant about your specific situation.

Do I need a privacy policy for a small website?

If you collect any personal information through forms, orders or newsletters, a privacy policy is strongly recommended.

Conclusion

Getting your legal foundations right early saves stress later. Register with URSB, sort out your tax position with URA, check licences, respect data protection rules and be transparent with customers online. Then focus on what you do best: serving customers and growing your business.