This article examines Data Protection Law and Privacy Rights in East African Jurisdictions: Towards a Research Agenda with a focused emphasis on South Sudan within the field of Business. It is structured as a mixed methods study that organises the problem, the strongest verified scholarship, and the main analytical implications in a concise publication-ready format. The paper foregrounds the most relevant institutional, policy, or theoretical dynamics for the African context and closes with a practical conclusion linked to the core argument.