Zimbabwean Government Enforces Data Protection Act, Introduces New Roles and Penalties

In an exclusive interview at the POTRAZ ICT Journal Symposium on October 16, 2024, Ms. Tsitsi Muriwo, the Data Protection Director at POTRAZ (Postal and Telecommunications Regulatory Authority of Zimbabwe), provided insights into the government's efforts to ensure compliance.

"The Data Protection Act is a critical step in safeguarding the personal information of Zimbabwean citizens," said Ms. Muriwo. "We have noticed a slow adoption, and as a result, the government has decided to take a more assertive approach to enforce the law."

Starting in November, the government will be sending CEOs to jail for non-compliance with the Data Protection Act. The penalty can range from 7 years of imprisonment to heavy fines. Furthermore, organizations that collect data from more than 50 data subjects are required to apply for a license, which costs approximately $300.

The Act has also introduced new job roles, such as Data Protection Officers (DPOs), and established a Data Protection Unit (DPU) to oversee the implementation and enforcement of the law.

During the panel discussion at the POTRAZ ICT Journal launch, the facilitator, Mr. Clifford Matamba, emphasized the importance of individuals seizing the opportunity to enroll in the Data Protection Officers course offered by  Zimbabwe Best Cyber Security University the Harare Institute of Technology (HIT). The course, priced at $1,800, is designed to equip professionals with the necessary skills and knowledge to fulfill the DPO role.

"Companies without a designated DPO will be fined in the coming season," warned Mr. Matamba. "We encourage all organizations to send their employees for this training to ensure compliance with the Data Protection Act."

To apply for the required licenses, individuals and organizations are advised to visit the POTRAZ office located at 1008 Performance Close, Mount Pleasant Business Park, Mount Pleasant, Harare, or call (024) 2333032.

The Zimbabwean government's commitment to data protection is clear, and the enforcement of the Data Protection Act signifies a crucial step in safeguarding the digital rights and privacy of its citizens. Compliance with the Act is now a necessity, and businesses and individuals are urged to take the necessary actions to avoid the consequences of non-compliance.

Download the Zimbabwe Data Protection Act

Doanload Below