DODOMA: THE Personal Data Protec- tion Commission (PDPC) has extended the deadline for registration of private and public institutions collecting or processing personal data to April 30 this year, in a move to enforce compliance with the Personal Data Protection Act, 2022.
The decision came after a greater number of institutions failed to register, contrary to directives issued by President Samia Suluhu Hassan in April last year, when launching the Person- al Data Protection Commis- sion (PDPC).
According to PDPC Director General, Dr Emmanuel Mkilia, as of Friday over 1,600 institutions had complied with the law.
“To provide a final op-portunity for institutions that have not initiated or completed their registration, the PDPC has extended the registration deadline to April 30, 2025. Institutions failing to reg- ister within this period will face strict legal actions, including penalties and other measures outlined in the Personal Data Protection Act,” Dr Mkilia said.
The Personal Data Protection Act, which came into effect on May 1, 2023, mandates all public and private institutions handling personal data to register with the PDPC.
Sections 14 and 21 of the Act outline the legal framework for mandatory registration, compliance and enforcement.
Dr Mkilia said that beginning May 1, 2025, the PDPC, in collaboration with law enforcement agencies, will commence legal action against non-compliant institutions.
Penalties will include heavy fines and other enforcement mea- sures stipulated in the Act.
“All institutions that collect, process, or store personal data must register with PDPC through the Registration and Compliance Management Information System (RCMIS), accessible on the PDPC’s official website,” he emphasized.
When launching the Commission in April 2024, President Samia directed all data collectors and processors in both the public and private sectors to register and comply with the personal data protection law by December 2024.
Her directives aimed to strengthen data protection laws, address privacy concerns, and instill a culture of compliance among institutions handling personal information.
Dr. Mkilia underscored that during the extension period, the PDPC will intensify public education and awareness campaigns about the importance of data protection and the reg- istration process.
“The PDPC reiterates that safeguarding personal data is not only a legal obligation but also a crucial component of Tanzania’s digital transformation agenda.
ALSO READ:Be cautious with personal information, says Zanzibar CS
Compliance reflects institutional accountability and commitment to protecting citizens’ rights, as outlined in Article 16(1) of the Constitution of the United Republic of Tanzania,” he said.
He urged institutions yet to register to take advantage of this final opportunity to fulfill their legal obligations, warning that non-compliance beyond the extended deadline will attract strict enforcement measures.
