PDPC issues final reminder for data registration

DAR ES SALAAM: THE Personal Data Protection Commission (PDPC) has issued a final reminder to all public and private institutions that collect or process personal data to register before the deadline of April 8, 2026, ahead of the enforcement phase beginning the following day.

Legal enforcement measures will take effect from April 9, 2026, marking the end of the voluntary registration period with the PDPC. Institutions that fail to comply risk facing legal action, including fines of up to 5bn/- for violations of the Personal Data Protection Act.

Speaking at a press conference in Dar es Salaam on Thursday, the Commission’s Director General, Mr Emmanuel Mkilia, said the government has provided sufficient time for institutions to prepare for compliance.

ALSO READ: Government vows to protect citizens with ‘emergencies’ abroad

“The government gave adequate time for registration, starting from April 2024 when President Samia Suluhu Hassan officially launched the Commission. The registration period was extended twice, with the most recent extension announced by the Minister for Communication and Information Technology, Angellah Kairuki, who set April 8, 2026 as the final deadline,” he noted.

According to the PDPC, full enforcement of the Personal Data Protection Act, Chapter 44, will begin on April 9, 2026. Any institution operating without registration in the PDPC system will be subject to legal penalties.

Under the law, individuals found in violation, may face fines ranging from 100,000/- to 20m/-, imprisonment of up to 10 years, or both. Institutions and companies may be fined between 1m/- and 5bn/-, depending on the nature and severity of the offence.

The act applies across multiple sectors, including government ministries and agencies, banks, insurance companies, hospitals, schools, universities and telecommunications firms.

Others include manufacturing industries, tourism operators, hotels, transport companies, construction firms, political parties, labour unions, religious organisations and non-governmental organisations.

The PDPC emphasised that the law safeguards citizens’ fundamental right to privacy while strengthening trust between service providers and customers, an essential factor for the growth of Tanzania’s digital economy and investment.