MARTIN MAWAYA
HARARE-The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) has officially handed over the first batch of Data Controller Licenses to 570 organizations in the country.

The handover of the data licenses by POTRAZ marks a significant step towards building a secure and accountable digital society in the country.
The Data Controller License, which aligns with the Cyber and Data Protection Act and the Constitution of Zimbabwe, represents a strong public commitment from the organizations to uphold the law, respect privacy, and manage data with integrity.
POTRAZ Director General, Dr. Gift Machengete, said in addition to issuing data licenses, the regulatory board has trained over 560 data protection officers, developed key guidelines, responded to breaches, and conducted extensive awareness campaigns across the country.
Machengete made these remarks during the inaugural data controller licensing ceremony last Friday, where he emphasized the importance of compliance in data protection.
“Compliance is more than ticking boxes; it is the foundation of trust. Around the world, failure to comply with data protection standards has led to serious consequences – identity theft, financial fraud, reputational damage, and the erosion of public confidence. We cannot allow the same risks to take root in our context,” said Machengete.
The POTRAZ director general stressed that this license is not just a regulatory requirement, but a strategic asset that fosters ethical service delivery, safeguards vital information, and builds the confidence of clients and partners in an increasingly data-driven world.
He emphasized that true compliance is an ongoing process, requiring vigilance, regular system reviews, staff training, and responsiveness to data subjects.
“Privacy is one of the most essential issues of our time,” he said. “In protecting data, we are protecting what it means to be human in a digital world.”
POTRAZ has pledged to balancing firm oversight with supportive engagement through its enforcement roadmap, as the regulatory body has also strengthened its presence internationally through memberships in global data protection networks.