This article outlines the legal requirements under the Cyber and Data Protection Act [Chapter 12:07], hereinafter the ‘Act' and Statutory Instrument 155 of 2024, including the obligations for licensing as Data Controllers, appointment of Data Protection Officers, and associated compliance measures.
INTRODUCTION
This article outlines the legal requirements under the Cyber and
Data Protection Act [Chapter 12:07], hereinafter the 'Act'
and Statutory Instrument (S.I.) 155 of 2024, including the
obligations for licensing as Data Controllers, appointment of Data
Protection Officers (DPOs), and associated compliance measures. The
Postal and Telecommunications Regulatory Authority of Zimbabwe
(POTRAZ) is the designated Data Protection Authority in Zimbabwe
according to section 5 of the Act.
LICENSING AS DATA CONTROLLERS
Under Section 4 of the Cyber and Data Protection Regulations
(S.I. 155 of 2024), all entities that process personal data for
commercial purposes must:
- Apply for a Data Controller license through Form DP1.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
