MISA Zimbabwe calls for urgent data protection reforms

Zim Now Writer

The Media Institute of Southern Africahas released a policy brief that highlights significant gaps in Zimbabwe's data protection, privacy, and surveillance legislation.

 The advocacy group argues that the absence of an independent data protection authority, inadequate cross-border data transfer regulations, and a draconian surveillance regime pose serious risks to individual privacy and civil liberties.

 Innocent Madongwe, a consultant engaged by MISA, emphasized the need for urgent reforms to address these shortcomings. He specifically called for the Cyber and Data Protection Act to be amended to exclude personal data processing activities carried out by individuals for personal or household purposes.

 Furthermore, Madongwe advocated for the establishment of a truly independent National Data Protection Authority. He criticized the current arrangement, which places the authority under the control of the executive and assigns it additional responsibilities as the Cyber Security Centre and the postal and telecommunications sector regulator.

 The MISA Zimbabwe policy brief also recommends expanding the definition of sensitive data, strengthening the rights of data subjects, and imposing stricter obligations on data controllers regarding data security breaches.

 Media and civil rights organizations have long raised concerns about the deficiencies in Zimbabwe's data protection and surveillance laws.