Loi 5/2021 · Data Protection Act [Chapter 11:22]

Cette loi zimbabwéenne établit un cadre juridique pour la protection des données personnelles, en conformité avec la Déclaration des droits de la Constitution. Elle crée une Autorité de protection des données (POTRAZ) et définit les obligations des responsables de traitement et des sous-traitants. La loi régit la qualité des données, les règles générales de traitement, les droits des personnes concernées, les transferts transfrontaliers, et prévoit des codes de conduite, des mécanismes de…

Cap. 11:22

No. 5/2021

DATA PROTECTION ACT [CHAPTER 11:12]

ARRANGEMENT OF SECTIONS

PART I

PRELIMINARY

Section

Short title.
Object.
Interpretation.
Application.

PART II

DATA PROTECTION AUTHORITY

Designation of Postal and Telecommunications Regulatory Authority as Data Protection Authority.
Functions of Data Protection Authority.

PART III

QUALITY OF DATA

Quality of data.

PART IV

GENERAL RULES ON THE PROCESSING OF DATA

Generality.
Purpose.
Non-sensitive data.
Sensitive information.
Genetic data, biometric sensitive data and health data.

PART V

DUTIES OF DATA CONTROLLER AND DATA PROCESSOR

Duties of Data Controller.
Rights of Data Subject.
Disclosures when collecting data directly from data subject.
Disclosures when not collecting data directly from data subject.
Authority to process.
Security.
Security breach notification.
Obligation of notification to Authority.
Content of notification.
Authorisation.
Openness of processing.
Accountability.

No. 5/2021 DATA PROTECTION Cap. 11:22

PART VI

DATA SUBJECT

Section

Decision taken on basis of Automatic Data Processing.
Representation of data subjection who is a child.
Representation of physically, mentally or legally incapacitated data subjects.

PART VII

TRANSBORDER FLOW

Transfer of personal information outside Zimbabwe.
Transfer to country outside the Republic of Zimbabwe which does not assure adequate level of protection.

PART VIII

CODE OF CONDUCT

Code of conduct.

PART IX

WHISTLEBLOWING

Whistleblower.

PART X

GENERAL PROVISIONS

Regulations.
Offences and penalties.
Appeals.

PART XI

CONSEQUENTIAL AMENDMENTS

Amendment of Chapter VIII of Cap. 9:23.
Amendment of Cap. 9:07.
Amendment of Cap. 11:20.

Cap. 11:22

DATA PROTECTION

No. 5/2021

ZIMBABWE

ACT

An Act to provide for data protection with due regard to the Declaration of Rights under the Constitution and the public and national interest; to establish a Data Protection Authority and to provide for their functions; to create a technology driven business environment and encourage technological development and the lawful use of technology; to amend sections 162 to 166 of the Criminal Code (Codification and Reform) Act [Chapter 9:23] to provide for investigation and collection of evidence of cyber crime and unauthorised data collection and breaches, and to provide for admissibility of electronic evidence for such offences; to amend the Interception of Communications Act [Chapter 11:20] to establish a Cyber Security Centre and to provide for matters connected with or incidental to the foregoing.

ENACTED by the Parliament and the President of Zimbabwe.

PART I

PRELIMINARY

1 Short title

This Act may be cited as the Data Protection Act [Chapter 11:22].

2 Object

The object of this Act is to increase data protection in order to build confidence and trust in the secure use of information and communication technologies by data controllers, their representatives and data subjects.

Printed by the Government Printer, Harare

No. 5/2021