Bulk SMS in Uganda: UCC, Sender ID and Data Protection Act
Bulk SMS Uganda guide: UCC, sender ID registration with MTN and Airtel, Data Protection and Privacy Act 2019 consent, mobile money OTP practice and GSM-7 text.
By OmniChannels.ai Editorial Team ยท Reviewed by BroadNet Messaging Solutions Team
SMS & OTP
Short answer
To send bulk SMS in Uganda, use a provider with routes to MTN Uganda and Airtel Uganda, register your alphanumeric sender ID (up to 11 characters) through the operators, and send marketing only with verifiable opt-in. The Data Protection and Privacy Act 2019 governs personal data, including phone numbers. Keep OTPs, such as mobile money codes, on a separate transactional route, and write in plain English to stay at 160 characters.
On this page
- What rules apply to bulk SMS in Uganda?
- What does the Data Protection and Privacy Act 2019 require?
- How does sender ID registration work in Uganda?
- Which operators carry SMS in Uganda?
- How should you handle OTPs and mobile money?
- How does text affect SMS length in Uganda?
- When should you send?
- A worked example: a Kampala school-supplies retailer
- What are the common mistakes?
- How OmniChannels.ai helps
Key takeaways
- The regulator is the Uganda Communications Commission (UCC); our regulation data gives a typical sender ID lead time of 5 to 10 business days and alphanumeric IDs up to 11 characters, with numeric long codes on select networks.
- The Data Protection and Privacy Act 2019 is the personal data law. Law-firm summaries place the Personal Data Protection Office under NITA-U, and describe a right to stop processing for direct marketing; check the Act's text for exact wording.
- Three networks carry traffic in our coverage data, all with direct routes: MTN Uganda (641-10), Airtel Uganda (641-01) and Lycamobile (641-44).
- Our regulation data calls for timestamped consent records kept at least 12 months and STOP wording in every promotional message.
- Plain English fits GSM-7 at 160 characters (153 per part); one emoji or curly quote moves the message to Unicode at 70 (67). We have found no regulator-published time-of-day window for promotional SMS.
This guide is for banks, fintech, e-commerce, education and operations teams that want to send business SMS to Ugandan mobile numbers: OTPs, payment alerts, reminders and promotions. It explains who regulates what, how sender IDs work, what the Data Protection and Privacy Act means for you and how message length behaves. It is a practical overview, not legal advice; confirm requirements with Ugandan counsel and the operators before launch.
What rules apply to bulk SMS in Uganda?
Three layers apply: telecom regulation by the UCC and the operators, the Data Protection and Privacy Act 2019, and your own consent practice. None is a single "bulk SMS law", so you assemble the picture from each.
| Layer | What it covers | Where to check |
|---|---|---|
| Uganda Communications Commission (UCC) | Telecom regulation and licensing | ucc.co.ug |
| Operators (MTN Uganda, Airtel Uganda) | Routes, sender ID set-up, filtering | Your provider, at onboarding |
| Data Protection and Privacy Act 2019 | Collecting and using personal data, including phone numbers | ULII |
Our regulation data lists the UCC as the regulator. It records that sender ID requirements are set by the operators, so the rule that matters on launch day is the one your operator route enforces. The UCC website we checked does not publish bulk SMS rules on its main page, so we have not stated any.
What does the Data Protection and Privacy Act 2019 require?
It regulates how personal data is collected, used and stored, and a phone number linked to a person is personal data. The Act was published in the Uganda Gazette in May 2019 according to the ULII copy, while another summary gives an earlier date, so confirm the commencement date in the official gazette if it matters to you.
Law-firm summaries of the Act say that:
- the Personal Data Protection Office sits under the National Information Technology Authority, Uganda (NITA-U) and oversees implementation and enforcement;
- a person can give notice requiring a data controller to stop processing their data for direct marketing;
- people can complain to the authority if their rights are infringed.
We read those points in secondary summaries and not the full statutory text, so confirm the section numbers and wording before you build a legal process on them. A practical approach does not depend on them: treat every number as personal data, collect it with a clear purpose and honour objections at once.
Our regulation data adds operating rules: verifiable opt-in, with timestamped consent records kept for at least 12 months and produced on regulator request, and STOP wording in every promotional message. A safe routine:
- Capture consent with a record: the exact wording shown, date and time, channel and number.
- Say who is sending and why at sign-up, for example "Offers from Pearl Mart by SMS".
- Honour opt-outs immediately and keep one suppression list across campaigns and channels.
- Keep records for at least 12 months, as our regulation data states.
- Do not buy lists. Purchased numbers have no consent trail.
Our opt-in consent generator drafts sign-up wording, and the guide to opt-in consent across channels shows how to record it.
How does sender ID registration work in Uganda?
Business SMS to Uganda uses an alphanumeric sender ID of up to 11 characters, with numeric long codes on select networks. Requirements are set by the operators and confirmed at onboarding. Our published lead time is 5 to 10 business days. Treat it as typical, not guaranteed; other published sources quote longer periods and the process can add time when documents are incomplete.
| Step | What to do |
|---|---|
| 1. Classify | Decide which traffic is transactional (OTP, alerts) and which is promotional, and plan one sender ID for each |
| 2. Choose names | Use your registered business or brand name; avoid generic names such as "INFO" and names that imitate banks or operators |
| 3. Prepare documents | Business registration papers, an authorisation letter naming the sender IDs and your provider, and sample message content |
| 4. Submit | Your provider files with the operators; track each approval |
| 5. Test | Send an OTP and a promotion to MTN and Airtel handsets |
Our sender ID letter generator drafts the authorisation letter, and you can check the current position with the sender ID checker or the Uganda sender ID page. If you want us to prepare and file the registration with you, see registrations; approval decisions stay with the operators and regulators. The background on formats is in our guide to sender ID types.
Which operators carry SMS in Uganda?
Three mobile networks appear in our coverage data, each with a direct route:
| Operator | MCC-MNC |
|---|---|
| MTN Uganda | 641-10 |
| Airtel Uganda | 641-01 |
| Lycamobile Uganda | 641-44 |
MTN and Airtel carry most business traffic. Read delivery reports per operator, not just a blended rate, because a healthy overall figure can hide a weak network. Our guide to improving SMS delivery rates shows how to diagnose it. For a neighbouring market with a similar structure, see our bulk SMS Kenya guide and the Tanzania guide.
How should you handle OTPs and mobile money?
Keep OTPs, payment confirmations and other service messages on a transactional sender ID and route, and promotions on their own. Mobile money is widely used for payments in Uganda, so login codes and payment confirmations are among the most important messages you will send, and a promotion inside an OTP puts them at risk if the route is filtered.
| Traffic | Example | Practice |
|---|---|---|
| Transactional | OTP, mobile money confirmation, delivery alert | No promotion inside; own sender ID; any hour |
| Promotional | Sale, new product, loyalty offer | Consented numbers only; opt-out in the message; daytime schedule |
| Mixed | "Your order shipped. Get 10% off next time" | Avoid; the offer makes it promotional |
Keep OTPs short, state how long they are valid, never ask the recipient to reply with a code or PIN, and tell users that staff never request it. For design and security, read our OTP authentication messages guide and the article on SMS pumping fraud prevention, since OTP routes attract artificial traffic.
How does text affect SMS length in Uganda?
Plain English fits the default GSM 7-bit alphabet, so one message holds 160 characters (153 per part when split). Emoji, curly quotation marks and some symbols switch the whole message to Unicode with 70 characters (67 per part). See GSM-7, Unicode SMS and concatenated SMS for definitions. If you write in a local language, run the final text through a counter, because any letter outside the GSM alphabet changes the encoding.
| Encoding | Single message | Per part when concatenated |
|---|---|---|
| GSM 7-bit | 160 characters | 153 |
| Unicode (UCS-2) | 70 characters | 67 |
These examples were counted against the limits (Pearl Mart is a synthetic shop):
| Message | Encoding | Characters | Parts |
|---|---|---|---|
Your Pearl Mart code is 482913. Valid for 5 minutes. Never share it with anyone. |
GSM-7 | 80 | 1 |
Pearl Mart: Your order #1042 has been paid. Delivery in Kampala is tomorrow before 5 pm. |
GSM-7 | 88 | 1 |
Pearl Mart: 10% off all school supplies this weekend. Details: pearlmart.example/s Reply STOP to opt out |
GSM-7 | 104 | 1 |
Pearl Mart: 10% off all school supplies this weekend ๐ Details: pearlmart.example/s Reply STOP to opt out |
Unicode | 106 | 2 |
The last row shows the cost of one emoji: the same message jumps from one part to two. Check final copy in the SMS character counter. For other scripts see SMS character limits and Unicode.
When should you send?
We have not found a regulator-published time-of-day window for promotional SMS in Uganda, and our regulation data records none. Agree sending hours with your provider and the operators, send promotions in local daytime (East Africa Time, UTC+3) and avoid late evenings. OTPs and alerts can go at any hour. The send time planner helps schedule campaigns, and our SMS marketing rules by country article compares hours across markets.
A worked example: a Kampala school-supplies retailer
"Pearl Mart" (synthetic) sells school supplies online and in shops.
- It registers two sender IDs, one for transactional and one for promotional traffic, and tests both on MTN and Airtel.
- It collects consent at the till and on its website, storing wording, timestamp and number for at least 12 months, and shows "Offers by SMS" with a clear opt-out.
- OTPs and payment confirmations use plain English at 160 characters or fewer.
- The weekly offer is checked against the suppression list, scheduled for local daytime and sent without emoji so it stays at one part.
- Opt-outs feed one suppression list that also covers WhatsApp and email.
What are the common mistakes?
- Generic sender names. Names such as "INFO" or "VERIFY" invite filtering and do not tell customers who is writing.
- No consent evidence. Without a timestamp and source you cannot answer a regulator request.
- Emoji in every message. One emoji turns a 160-character message into a 70-character one.
- Look-alike sender names. Names that imitate banks, operators or mobile-money brands risk blocking.
- Mixing OTP and promotion on one sender ID.
- Treating lead times as promises. Plan buffer beyond 5 to 10 business days.
How OmniChannels.ai helps
OmniChannels.ai is powered by BroadNet, which has direct routes to MTN Uganda, Airtel Uganda and Lycamobile in our coverage data. We prepare and file sender ID registration with you and give you per-operator delivery reports, with SMPP 3.4 for high volume. For indicative list prices, see the Uganda SMS pricing page, then book a demo. Small team? Our SMS marketing guide for small businesses covers the basics.
Frequently asked questions
Is bulk SMS legal in Uganda?
Yes, businesses send OTPs, alerts and marketing by SMS. The UCC is the telecom regulator, operators set sender ID requirements, and the Data Protection and Privacy Act 2019 governs personal data. There is no single statute called a bulk SMS law, so use a legitimate route, hold consent for marketing, offer an opt-out and ask Ugandan counsel about edge cases.
Do I need to register a sender ID in Uganda?
Plan on it. Our regulation data says alphanumeric sender IDs, up to 11 characters, are set up through the operators, and that BroadNet confirms the current requirements during onboarding, with a typical lead time of 5 to 10 business days. Some operators require pre-registration, so test delivery on MTN and Airtel before a launch.
Do I need consent to send promotional SMS in Uganda?
Treat consent as required. Our regulation data calls for verifiable opt-in, with timestamped records kept at least 12 months and produced on regulator request. The Data Protection and Privacy Act 2019 covers personal data processing, and summaries describe a right to stop marketing use of your data. Keep a record of when and how each number agreed.
Which operators carry SMS in Uganda?
Our coverage data lists MTN Uganda (641-10), Airtel Uganda (641-01) and Lycamobile (641-44), all with direct routes. MTN and Airtel carry most business traffic. Read delivery reports per network and not a blended figure, because a healthy total can hide a weak network.
How should I send mobile money OTPs in Uganda?
Send them on a transactional sender ID and route, separate from promotions. Keep the text short, state the validity period, never ask the recipient to reply with the code and tell users that staff never request it. Plain English at under 160 characters stays in one part, which avoids delays.
Does emoji change SMS length in Uganda?
Yes. Standard English text fits the GSM 7-bit alphabet at 160 characters per message. One emoji or curly quotation mark switches the whole message to Unicode, which holds 70 characters. A 104-character promotion becomes a 106-character, two-part message with a single emoji. Check final copy in an SMS character counter.
Sources
Keep reading
More guidesSMS & OTP
Bulk SMS in Ecuador: ARCOTEL, Sender ID and Data Law Guide
Bulk SMS Ecuador guide (SMS masivos): ARCOTEL, sender set-up with Claro, Tigo and CNT, the 2021 Data Protection Act, consent, and Spanish accents in GSM-7.
9 min read
SMS & OTP
Bulk SMS in Egypt: NTRA Rules, Sender ID and Arabic Tips
Bulk SMS in Egypt: NTRA and operator sender ID approval, Vodafone, Orange, etisalat by e& and WE, Law 151/2020 consent, Arabic Unicode and send timing.
9 min read
WhatsApp
Best WhatsApp Business API Provider in France (Paris)
Choosing the best WhatsApp Business API provider in France and Paris: app vs API, a vendor-neutral checklist, GDPR and CNIL consent, French templates.
9 min read