Cyber and Data Protection Act Essential Questions for Zimbabweans (POTRAZ Guide)

Introduction

The Cyber and Data Protection Act (CDPA) protects the privacy of individuals and regulates how businesses and organizations collect, process, and store personal data in Zimbabwe. POTRAZ enforces the law.

1. What is the CDPA?

A law to protect personal data and privacy in Zimbabwe.

Covers how data is collected, processed, stored, and shared.

Sets out rules for cybersecurity and cybercrime prevention.

2. Who Enforces the CDPA?

POTRAZ (Postal and Telecommunications Regulatory Authority of Zimbabwe) oversees compliance.

The Zimbabwe Republic Police Cyber Unit handles investigations for breaches.

3. Common Questions Zimbabweans Ask

Q1: What counts as personal data?

Name, ID number, phone number, email, bank details, and any other information that identifies a person.

Q2: Can companies collect my data?

Yes, but only with your consent and for specified purposes.

Q3: What if my data is misused?

You can report it to POTRAZ, which investigates and can impose fines or penalties.

Q4: Does the CDPA apply to online businesses?

Yes. E-commerce sites, social media platforms, and apps must comply with CDPA rules.

4. Tips for Citizens

Only share personal data with trusted companies.

Read privacy policies carefully before giving consent.

Report breaches to POTRAZ immediately.