Zimbabwe has introduced data protection licences for organisations that gather first-party data.

The data protection licensing payments range from $50 to $2500, and organisations, including churches and WhatsApp group admins are required to secure these licences from the telecoms regulator, the Post and Telecommunications Regulatory Authority (POTRAZ).

Furthermore, these organisations and WhatsApp groups must appoint a data protection officer (DPO) who is trained and accredited by POTRAZ.

Zimbabwe’s ICT minister, Tatenda Mavetera, wrote on LinkedIn: “Even churches that collect personal data ought to have such a licence and appoint a DPO. WhatsApp group admins are not spared too, if your groups are meant for business, you should as well obtain a licence. Failure to comply attracts penalties.”

According to Mavetera, the move enforces the country’s Data Protection Act enacted in 2021, which aims to increase data protection.

The law also addresses aspects of cybersecurity and cybercrime. The Act's main focus is on data privacy and ensuring data protection for any data acquired by data handlers both within and outside the country if the means used for processing is located in Zimbabwe.