PDPC calls for full compliance on data protection
DAR ES SALAAM: MORE than 10,000 public and private institutions involved in the collection or processing of personal data have completed their registration with the Personal Data Protection Commission (PDPC).
The PDPC Director General, Dr Emmanuel Mkilia disclosed this during a press conference held in Dar es Salaam yesterday, saying the registration deadline has been extended to April 8th this year.
He said the extension follows government directives issued by the Minister for Communication and Information Technology, Ms Angela Kairuki, on January 8th this year.
“In line with government directives, all public and private institutions that collect or process personal data and have not yet completed their registration with the PDPC have been granted an additional three-month grace period, running from January 8th to April 8th this year,” Dr Mkilia said.
He explained that the extension is intended to give institutions adequate time to voluntarily comply and complete their registration within the specified period.
Dr Mkilia clarified that the extended registration window does not amount to a suspension of law enforcement, but rather represents a final opportunity for voluntary compliance before strict measures are enforced against non-compliant institutions.
He noted that once the grace period expires, the PDPC will immediately begin compliance inspections targeting both public and private institutions that collect, store, process, or transfer personal data.
According to him, the inspections will focus on identifying institutions that handle personal data in violation of the Personal Data Protection Act, Chapter 44 and its accompanying regulations, including the unlawful transfer of personal data outside the country.
ALSO READ: Observe data protection laws, scribes urged
He further warned that institutions found to have breached privacy rights or used personal data without the consent of data subjects will face severe penalties, including fines, imprisonment, or both, in addition to compensating affected individuals.
Dr Mkilia urged all institutions to take immediate steps to register, strengthen their personal data protection systems and ensure full compliance with the law, emphasising that this is a statutory obligation and a critical responsibility in safeguarding citizens’ constitutional rights, particularly the right to privacy in the digital economy.
He also noted that Tanzania will join other countries worldwide in commemorating Privacy and Personal Data Protection Week, an initiative aimed at promoting global awareness and solidarity in the protection of privacy rights.
Dr Mkilia said the commemorations will feature public education programmes, initiatives to raise awareness of citizens’ rights as data subjects and efforts to promote accountability among institutions that collect and process personal data.
