East Africa / Tanzania
AvailableTanzania's privacy framework. Connected to your programme.
Personal Data Protection Act, 2022
Turn local requirements into assigned work, linked records and evidence you can review.
Tanzania · in hlola
The framework at a glance.
Tanzania's data protection law, supervised by the Personal Data Protection Commission.
- Country
- Tanzania
- Primary legislation
- Personal Data Protection Act, 2022
- Regulator
- Personal Data Protection Commission (Tanzania)
- Statutory clocks
- Breach notice 72 hours · rights requests 30 days
Key areas
From requirements to practical work.
- Governance2 controls to evidence
- Principles1 control to evidence
- Lawfulness1 control to evidence
- Special categories1 control to evidence
- Transparency1 control to evidence
- Retention1 control to evidence
- Rights1 control to evidence
- Security1 control to evidence
- Incidents1 control to evidence
- Transfers1 control to evidence
- Third parties1 control to evidence
See how the work connects.
Move from a requirement to the record, owner and evidence behind it.
Explore platform featuresStatuses support programme review; they are not legal certification.Illustrative records
What an inspector checks
12 controls, mapped to the Act.
TZ-001 · Personal Data Protection Act, 2022: registration of data collectors and processors
Register with the Personal Data Protection Commission
Data collectors and processors must register with the Commission before collecting or processing personal data, and renew the registration before it lapses.
TZ-002 · Personal Data Protection Act, 2022 and its regulations: confirm with counsel whether designation is mandatory
Designate a person responsible for data protection
Name a person responsible for personal data protection who advises the organisation and handles the Commission and data subjects.
TZ-003 · Personal Data Protection Act, 2022: principles of personal data protection
Apply the principles of data protection
Collect and process personal data lawfully, fairly and transparently, for specified purposes, limited to what is necessary, accurate, kept no longer than needed and secure.
Three are shown here; the full set, with tasks and evidence guidance, is in hlola.Pending review by counsel.
Resources
Explore Tanzania resources.
Bring Tanzania into your privacy programme.
See your readiness against Tanzania PDPA in a demo set up for your organisation.