Tanzania’s Personal Data Protection Act 2022 comes into force today, introducing the country’s first comprehensive data protection law and establishing the Personal Data Protection Commission.
Key points
- Controllers and processors must register with the Personal Data Protection Commission.
- Organisations must implement security safeguards to protect personal data.
- Personal data breaches must be notified.
- Cross-border transfers of personal data are restricted.
- Data subjects gain rights including access, correction and objection.
UK organisations with Tanzanian operations, customers or suppliers should confirm whether they need to register and review transfer arrangements and incident response processes.
Source: Personal Data Protection Act 2022 (PDPC Tanzania)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
