Data Protection Act: What you can and cannot do under new law - ZimFact
Ngoni Mhuruyengwe
December 8, 2021
On December 3, 2021, the Zimbabwe government gazetted the Data Protection Act.
The law was originally referred to as the Cyber Security and Data Protection Bill.
The Zimbabwe government says the law will safeguard users in cyberspace and that it is in line with similar laws in other countries. However, critics such as the Media Institute of Southern Africa, say some of the clauses may be used to stifle the work of civil society and whistleblowers, and that part of the law violates freedom of expression as guaranteed in the national Constitution.
Why was the law enacted?
According to its memorandum, the law is meant to consolidate cyber-related offences and provide for data protection with due regard to the Declaration of Rights under the Constitution and the public and national interest, create a technology-driven business environment and encourage technological development and the lawful use of technology.
The Data Protection Act consolidates several pieces of legislation that govern cyber security and data protection. These include the Postal and Telecommunications Act, Official Secrecy Act, Criminal law (Codification and Reform) Act and the Interceptions of Communications Act.
What does the law say?
Here are some of the offences contained in the consolidated law:
Information sources: Zimbabwe Government Gazette, Veritas, MISA-Zimbabwe
FEATURED