Tanzania has entered a new era of data privacy regulation following the establishment of the Personal Data Protection Commission (PDPC) under the Personal Data Protection Act, 2022. With enforcement now active, businesses across all sectors must comply with strict legal requirements when collecting, processing, or storing personal data.
If your business handles customer or employee information, you may already be classified as a data controller in Tanzania—even without realizing it.
Who Must Comply with PDPC Regulations?
The Personal Data Protection Act applies broadly across industries. Key sectors affected include:
- Telecommunications and ISPs
- Banks and financial institutions
- Healthcare providers and clinics
- E-commerce and retail businesses
- NGOs, schools, and religious organizations
In simple terms, any business collecting personal data in Tanzania must register with PDPC.
Are You a Data Controller?
You are likely a data controller if your business:
- Collects customer names, phone numbers, or emails
- Maintains employee records or payroll data
- Operates a website or online store
- Uses marketing databases or mailing lists
Failure to comply may lead to penalties, reputational damage, and legal risks.
How to Register with PDPC in Tanzania
Step 1: Prepare Required Documents
To begin PDPC registration, you need:
- Completed application form (Form No. 1)
- Business registration certificate
- Identification documents
- Details of data processing activities
Step 2: Submit Application and Pay Fees
PDPC categorizes applicants based on size:
- Small businesses: TZS 100,000
- Medium businesses: TZS 200,000
- Large businesses: Up to TZS 1,000,000
- NGOs/Religious bodies: Reduced fees apply
Step 3: Verification Process
The PDPC reviews applications within 7 days, requesting clarification if needed.
Step 4: Approval and Certification
Once approved, your organization receives a PDPC registration certificate, valid for five years.
Why PDPC Compliance Matters
Complying with Tanzania’s data protection laws offers significant benefits:
- Avoid legal penalties and fines
- Build trust with customers and partners
- Strengthen your brand reputation
- Ensure secure handling of sensitive information
In today’s digital economy, data privacy is a competitive advantage.
Key Compliance Steps for Businesses
To stay compliant with the Personal Data Protection Act:
- Register with PDPC immediately
- Conduct a data audit
- Implement data security policies
- Train employees on data protection
- Monitor and update compliance regularly
Conclusion
The launch of the PDPC marks a major shift in Tanzania’s regulatory landscape. Businesses must act quickly to comply with the Personal Data Protection Act and avoid disruptions.
Should you require assistance, kindly reach out to our team directly at www.gerpatsolutions.co.tz info@gerpatsolutions.co.tz, Mob: +244 742 826 955