← back to overview
Tanzania PDPA · regulation pack · preview

Tanzania Personal Data Protection Act, 2022

Tanzania's primary data-protection law; enforced by the Personal Data Protection Commission (PDPC). Reports under this pack are PDPC-ready.

jurisdiction · TZ version · 2022.12 effective · Dec. 1, 2022 requirements · 5
requirements — preview
S.4 · Article

Principles of personal-data processing

Lawfulness, fairness, purpose limitation, accuracy, storage limitation.

artifact: ai_policy
S.25 · Article

Registration of controller or processor

Registration with the PDPC before processing personal data.

evidence: pdpc_registration
S.27 · Article high-risk gate

Impact assessment

DPIA for processing that poses significant risk to rights and freedoms.

artifact: dpia evidence: dpia_signoff
remaining 2 requirements — locked
S.32 · Article

Processor contract

Written processor contract with required clauses.

S.34 · Article

Data breach notification

PDPC notification within 72 hours; subjects where high risk.

Unlock the full Tanzania PDPA pack

Get all 2 remaining requirements, generated reports, evidence-mapping templates, and the audit-chain export. Cancel anytime.

Unlock the pack → or full platform

Not ready to buy? Run the free EU AI Act gap report.

12-question intake mapped to Articles 9-15. Branded PDF in your inbox in minutes. No card required.

Free gap report →