Legal Talk with Tapiwa

20/08/2026

29/07/2026

LEGAL ALERT: MANDATORY DATA PROTECTION COMPLIANCE INSPECTIONS
Regulatory Notice 2 of 2026 | POTRAZ

The Postal and Telecommunications Regulatory Authority of Zimbabwe - POTRAZ, as the Data Protection Authority, has announced that mandatory compliance inspections and assessments of Data Controllers will begin from 1 September 2026.

BACKGROUND
This follows Statutory Instrument 155 of 2024 which made it mandatory for all public and private organisations that process personal data to obtain a Data Controller Licence by 12 March 2025, in line with the Cyber and Data Protection Act [Chapter 12:07].

WHAT’S HAPPENING
POTRAZ will conduct inspections and assessments in terms of _Section 6(1)(a) read with Section 21(3) & (4)_ of the Act.
A risk-based approach will be used.

Priority Sectors for Phase 1 Inspections:
1. Financial Institutions
2. Insurance Companies
3. Local Authorities
4. Healthcare Providers
5. Mining Enterprises
6. Religious Organisations
7. Schools, Tertiary Institutions and professional bodies
8. Government MDAs
9. NGOs and PVOs

13/07/2026

25/06/2026

16/06/2026

11/06/2026

TITTLE DEEDS DIGITALIZATION UPDATE