PDPC: CCTV use without registration illegal
ARUSHA: THE Tanzania Personal Data Protection Commission (PDPC) has warned that it is a legal offence for any individual or institution to install or operate CCTV cameras without registering with the Commission.
The warning was issued over the weekend by the Head of Public Relations and Communications at the PDPC, Innocent Mungy, during a presentation at the 110th Public Education Stakeholders Meeting (WASHITIRI) held in Arusha and organised by the Tanzania Broadcasting Corporation (TBC).
Mr Mungy explained that CCTV cameras are considered tools for collecting personal data and are widely used in homes, offices, business premises, recreational areas, and other locations.
He said the law requires all CCTV users to display clear notices informing the public that the area is under surveillance and that the Personal Data Protection Act is being observed. This helps ensure transparency and protects users from legal action related to invasion of privacy and violation of personal dignity.
“The Personal Data Protection Act recognises CCTV cameras as tools that collect personal data. It is therefore important to display signs indicating that an area is under surveillance, just as people post warnings about the presence of a dangerous dog,” he said.
Mr Mungy also stressed that CCTV cameras must be positioned to capture only the owner’s premises and not extend into neighbouring or public areas unnecessarily.
He warned that failure to comply with the law constitutes an offence, adding that individuals who suffer harm may file complaints with the Commission and seek compensation depending on the extent of the damage.
“Compensation will depend on the nature and seriousness of the harm suffered. The affected person may state the impact experienced and the amount of compensation sought before the Commission,” he explained.
He added that the Commission has the authority to impose fines, order compensation, or both. In cases involving criminal elements, offenders may face prosecution, including possible imprisonment.
Mr Mungy emphasised that the main objective of the Personal Data Protection Act is to safeguard individuals’ privacy and protect personal data, noting that personal dignity is closely linked to the protection of such information.
He further noted that all service providers that collect personal data including hotels, schools, hospitals, and other institutions—must register with the PDPC. The law is set to come into force on April 8 this year, with the Commission expected to issue an official statement ahead of its implementation.
