🇿🇼
Zimbabwe
Cyber and Data Protection Act [Chapter 12:07] (2021)
Africa🔵 Substantial
Compliance Score
36%
5 Addressed
7 Partial
2 None
Authority
Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)
Overview
Zimbabwe's Cyber and Data Protection Act regulates personal data and establishes regulatory functions involving POTRAZ. The framework includes registration and compliance obligations; verify current regulations and regulator guidance.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Zimbabwe?+
Zimbabwe is governed by the Cyber and Data Protection Act [Chapter 12:07] (2021). The law is enforced by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ). According to our analysis, the country has a Substantial level of data protection framework.
Does Zimbabwe require a Data Protection Officer (DPO)?+
Partially. The Cyber and Data Protection Act [Chapter 12:07] (2021) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Zimbabwe?+
Partially. While Cyber and Data Protection Act [Chapter 12:07] (2021) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Zimbabwe?+
The Cyber and Data Protection Act [Chapter 12:07] (2021) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.