MARTIN MAWAYA
HARARE- In a historic move, Zimbabwe has introduced a formal licensing regime for data controllers, cementing its position as a regional leader in data protection and cybersecurity.
Speaking at the inaugural license handover ceremony, Information, Communication and Technology (ICT) Minister, Tatenda Mavetera, lauded this milestone as a testament to Zimbabwe’s commitment to safeguarding personal data and promoting accountability in the digital economy.
“This initiative underscores our government’s dedication to securing cyberspace and fostering trust in the digital age,” Mavetera said. “As the world becomes increasingly interconnected, Zimbabwe is setting the pace for data protection best practices in Africa and beyond.”
The new licensing regime, established through Statutory Instrument 155 of 2024 on Cyber and Data Protection, mandates that all entities handling personal data in Zimbabwe obtain a data controller license.
This includes banks, telecommunications companies, hospitals, government agencies among others.
Mavetera emphasized that compliance is not optional, but a statutory obligation.
“Data protection is a national priority, not a privilege reserved for the few,” She said. “We must strike a balance between quality training and reasonable costs to ensure widespread compliance.”
The training program for data controllers was delivered through a partnership between the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) and the Harare Institute of Technology (HIT).
Mavetera urged POTRAZ to expand the training nationwide to ensure equal access for aspiring data controllers across all provinces.
“No Zimbabwean should be left behind due to geographical constraints,” Mavetera stated. “Decentralization and devolution of this training will empower data controllers in Bulawayo, Mutare, Masvingo, Gweru, and beyond.”
The minister also called upon the newly licensed data controllers to uphold the highest standards of integrity, transparency, and accountability in their operations, noting that they are now the custodians of sensitive personal data.
“With great power comes great responsibility,” Mavetera said. “Your ethical stewardship will pave Zimbabwe’s path to a thriving digital ecosystem.”
This licensing regime, the first of its kind in Africa, is expected to have far-reaching benefits for Zimbabwe.
It will attract foreign direct investment, unlock innovation, facilitate cross-border trade, and empower citizens by securing their data and granting them greater control over its use.
“We must continue working together – government, regulators, academia, and the private sector – to ensure that Zimbabwe remains at the forefront of innovation, compliance, and inclusive growth,” added Matevera.
