As the technological revolution continues advancing at an
exponential rate, each novel advance buttresses the correlation
between technology and data. The protection of the said data has
been brought into focus following various intrusions or other
instances laissez-faire approaches to the protection thereof by
enterprises whose business models revolve around the collection of
data. It is in this context that Zimbabwe has promulgated the Data
Protection Act, in the hope of regulating the collection, storage
and use of personal data. Whilst there is an appropriate
conversation on the merits and demerits of the substantive issues
arising from the newly enacted legislation , the thrust this
article will advocate that all business enterprises ought to have
data protection policies over and above that which has been
prescribed under national law. Data protection or lack thereof will
increasingly become a risk factor to all business models hence it
is suggested internal data
