The right to privacy is guaranteed under Article 16 of the Constitution of the United Republic of Tanzania as a fundamental human right. In giving effect to this constitutional right, the Personal Data Protection Act, No. 11 of 2022, Cap. 44 of the Laws of Tanzania, was enacted by Parliament in November 2022, received Presidential Assent in December 2022, and came into force on 1st May 2023.
The Act establishes a legal framework governing the collection, processing, use, storage, disclosure, and transfer of personal data while safeguarding the rights of data subjects and prescribing the obligations of data controllers and data processors.
Pursuant to Section 6 of the Act, the Personal Data Protection Commission (PDPC) was established on 1st May 2023 as an independent regulatory authority responsible for overseeing and enforcing compliance with the Act.
The Commission was officially inaugurated by Her Excellency Dr. Samia Suluhu Hassan, President of the United Republic of Tanzania, on 3rd April 2024, marking the commencement of its full operational mandate.
The Commission is mandated to register data controllers and data processors, promote awareness of personal data protection, monitor compliance with the Act, investigate complaints and personal data breaches, issue regulatory guidance, and advise the Government on matters relating to personal data protection and privacy.
Through its regulatory, advisory, research, and public awareness functions, the PDPC is committed to promoting a culture of privacy, accountability, and responsible personal data governance while fostering trust in Tanzania's digital economy and supporting secure digital transformation.