🇿🇲
Zambia
Data Protection Act No. 3 of 2021
Africa🔵 Substantial
Compliance Score
50%
7 Addressed
5 Partial
2 None
Authority
Data Protection Commission (DPC)
Overview
Zambia's Data Protection Act No. 3 of 2021 establishes a framework for personal-data processing, data-subject rights, and controller/processor obligations. The Data Protection Commission is the relevant supervisory body.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Zambia?+
Zambia is governed by the Data Protection Act No. 3 of 2021. The law is enforced by the Data Protection Commission (DPC). According to our analysis, the country has a Substantial level of data protection framework.
Does Zambia require a Data Protection Officer (DPO)?+
Partially. The Data Protection Act No. 3 of 2021 may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Zambia?+
Partially. While Data Protection Act No. 3 of 2021 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Zambia?+
The Data Protection Act No. 3 of 2021 has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.