Scribd
Upload
25 views14 pages

Cybersecurity Law in Zimbabwe Presentation

The Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, 2024 establishes a framework for data protection in Zimbabwe, requiring individuals to be licensed to process personal data. It outlines the licensing process, obligations of data controllers, and the role of the Postal and Telecommunications Regulatory Authority (POTRAZ) in ensuring compliance. The regulations aim to enhance the protection of personal data and the rights of individuals by mandating security measures and breach notification protocols.

Uploaded by

Carlos
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
25 views14 pages

Cybersecurity Law in Zimbabwe Presentation

The Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, 2024 establishes a framework for data protection in Zimbabwe, requiring individuals to be licensed to process personal data. It outlines the licensing process, obligations of data controllers, and the role of the Postal and Telecommunications Regulatory Authority (POTRAZ) in ensuring compliance. The regulations aim to enhance the protection of personal data and the rights of individuals by mandating security measures and breach notification protocols.

Uploaded by

Carlos
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 14

Cybersecurity Law

in Zimbabwe
CYBER AND DATA PROTECTION (LICENSING OF DATA
CONTROLLERS AND APPOINTMENT OF DATA
PROTECTION OFFICERS) REGUL ATIONS, 2024.
INTERPRETATION
Defines key terms such as:
Act: Refers to the Cyber and Data Protection Act.
Authority: The governing body responsible for data protection.
Biometric data: Includes physical characteristics like fingerprints and facial
recognition.
Processing of Data
States that individuals must be licensed to process personal data. Specific
activities requiring a license include deciding on data collection methods and
purposes for commercial gain.

Licensing of Data Controllers


Outlines the process for obtaining a data controller license, including:
Application submission using specified forms. A 14-day review period by the
Authority. Existing data controllers must apply within six months of regulation
promulgation(to put into force/openly declare).
Validity and Renewal of Data
Controller Licence
Describes the validity of licenses (12 months) and the renewal process,
including penalties for late renewal.

Licence Categories
Details the categories of licenses based on the number of data subjects processed:
Tier 1: 50 to 1,000 data subjects. Tier 2: 1,001 to 100,000 data subjects. Tier 3: 100,001 to
500,000 data subjects. Tier 4: Over 500,000 data subjects.
Submission of False
Information
Imposes penalties for submitting false information in license applications.

Exemption from Licensing


Lists scenarios where data controllers are exempt from licensing, such as
personal or household data processing, and mandates registration with the
Authority for certain activities.
Register of Licensed Data
Controllers
Mandates the Authority to maintain a public register of licensed controllers,
which can be inspected by anyone.

Obligations of Data Controllers


Details the responsibilities of data controllers, including:
Continuous training for Data Protection Officers (DPOs).Notification of data
processing activities and any changes.Ensuring security measures for
personal data.
Sensitisation, Educational
Awareness, and Training
Allows the Authority to conduct public awareness and training programs for
data controllers, DPOs, and data subjects.

Appointment of Data Protection Officers


Requires data controllers to appoint a DPO and notify the Authority, including
specific timelines for notification upon changes.
Guidelines on Qualifications
of Data Protection Officers
Specifies the qualifications and training requirements for DPOs, emphasizing
the need for relevant skills and knowledge.

Functions of Data Protection Officers


Outlines the responsibilities of DPOs, including compliance monitoring, staff
training, and serving as a contact point for data subjects.
Approval of Codes of
Conduct
Establishes the process for submitting codes of conduct for approval by the
Authority, ensuring compliance with the Act.

Security of Data
Mandates the implementation of security measures to protect personal data,
including risk assessments and technical safeguards.
Security Breach Notification
Requires data controllers to report personal data breaches to the Authority
within 24 hours and notify affected individuals within 72 hours if there’s a
high risk.

Schedules
First Schedule: Application/Renewal Form for Data Controller License.
Second Schedule: Fee structure for various licenses and training.
Third Schedule: Notification Form for DPO designation.
Fourth Schedule: Breach Notification Form.
POTRAZ
POTRAZ refers to the Postal and Telecommunications Regulatory Authority of
Zimbabwe. It is the regulatory body responsible for overseeing and regulating
the postal and telecommunications sectors in Zimbabwe.

Functions of POTRAZ:
Regulation of Telecommunications: POTRAZ ensures that telecommunications services are
provided in accordance with the law, promoting fair competition and protecting consumers’
rights.
Licensing: It is responsible for issuing licenses to telecommunications operators and service
providers, including data controllers under the Cyber and Data Protection regulations.
Functions of POTRAZ contd..
Policy Implementation: POTRAZ implements government policies related to
postal and telecommunications services, ensuring they align with national
interests.
Consumer Protection: The authority works to protect consumers by
addressing complaints and ensuring that service providers meet quality and
service standards.
Promoting Universal Access: It strives to ensure that all citizens have access
to telecommunications services, especially in rural and underserved areas.
Data Protection Oversight: Under the Cyber and Data Protection regulations,
POTRAZ plays a role in regulating data controllers and ensuring compliance
with data protection laws.
Importance in Data
Protection
POTRAZ is involved in overseeing compliance with the Cyber and Data
Protection Act and the associated regulations. This includes:

 Licensing data controllers.


 Maintaining the register of licensed data controllers.
 Providing guidance and support on data protection issues.
Conclusion
These regulations aim to establish a robust framework for data protection,
ensuring that data controllers are licensed, accountable, and comply with
security and notification requirements. They enhance the protection of
personal data and the rights of individuals in Zimbabwe.

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy