PDPC issues final reminder to institutions to submit data before the 8 April deadline

DAR ES SALAAM: LEGAL enforcement measures will take effect from 9 April 2026 as the deadline for voluntary registration with the Personal Data Protection Commission (PDPC) comes to an end.

Institutions that fail to comply risk facing legal action, including fines of up to 5bn/- for violations of the Personal Data Protection Act.

The PDPC has issued a final reminder to all public and private institutions that collect or process personal data that registration period elapses by 8 April 2026, ahead of the enforcement phase beginning the following day.

Speaking at a press conference in Dar es Salaam on March 26, 2026, the Commission’s Director General, Dr Emmanuel Lameck Mkilia, said the government has provided sufficient time for institutions to prepare for compliance.

“The government gave adequate time for registration, starting from April 2024 when the President  Dr Samia Suluhu Hassan, officially launched the Commission. The registration period was extended twice, with the most recent extension announced by the Minister for Communication and Information Technology, Angellah Kairuki, who set 8 April 2026 as the final deadline,” said Dr. Mkilia.

ALSO READ: Tanzania lures global investors to tap into the country’s cotton and textile sector

According to the PDPC, full enforcement of the Personal Data Protection Act, Chapter 44 will begin on 9 April 2026. Any institution found operating without registration in the PDPC system will be subject to legal penalties.

Under the law, individuals found in violation may face fines ranging from  100,000/- to  20m/-, imprisonment of up to 10 years, or both. Institutions and companies may be fined from 1m/- to  5bn/-, depending on the nature and severity of the violation.

The Personal Data Protection Act applies across multiple sectors, including government ministries and agencies, banks, insurance companies, hospitals, schools, universities, telecommunications companies, manufacturing industries, tourism operators, hotels, transport companies, construction firms, political parties, labour unions, religious organizations, non-governmental organizations, and many other institutions handling personal data.

PDPC emphasize that the law serves as a safeguard for citizens by protecting the fundamental right to privacy. It also strengthens trust between service providers and customers, which is considered essential for the growth of the digital economy and investment in Tanzania.