How secure is personal data in Tanzania, and what responsibilities do businesses now carry when collecting or processing it? With the enactment of the Personal Data Protection Act (PDPA), Tanzania introduced a comprehensive legal framework governing the collection, processing, storage, and transfer of personal data for the first time. The law places strict obligations on data collectors and processors, establishes a Personal Data Protection Commission, and introduces significant penalties for non-compliance. This article explores the key principles, rights, compliance requirements, and legal implications introduced under Tanzania’s new data protection regime.
