Why we exist
Compliance inspections under the Cyber and Data Protection Act [Chapter 12:07] begin on 1 September 2026. Most Zimbabwean organisations that must register as data controllers have not yet done so. We built this resource to close that gap with plain-language guidance, a free self-check and a practice that can do the work for you.
What we are
The Zimbabwe Data Protection Guide is an independent compliance resource — not POTRAZ and not a regulator. Every claim cites its source: Act 5 of 2021, S.I. 155 of 2024 and CDPG 1 of 2025. We provide compliance guidance; we do not provide independent legal advice, and licensing decisions rest with POTRAZ.
Data Protection Officer
Our Data Protection Officer is Mr. Moses Nkomo, who oversees the integrity of our own compliance practice and the guidance we publish. He brings years of commercial and intellectual-property teaching experience to the data protection programme.
Certification and authority
Our guidance is built on the primary legislation and subordinate instruments of Zimbabwe's data protection regime. We do not claim accreditation from the regulator; our authority rests on the accuracy of our citations and the rigour of our method.
How to start
Take the free self-check, download a sector brief, or book a consultation. There is no obligation, and the first conversation is free.