Tanzania Personal Data Protection Act 2022
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | TZ PDPA |
| Region | Middle East & Africa |
| Country or scope | Tanzania |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers TZ PDPA
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
TZ-PDPA-SEC Security Safeguards for Processing | Controllers and processors must establish appropriate technical and organisational measures to protect personal data against loss, unlawful access and alteration, evidenced by integrity hashes on processing-system components (PDPA 2022, security-of-processing obligations) | Scan |
TZ-PDPA-REG Registration and Processing Records | Mandatory registration of controllers and processors with the Commission presupposes an accurate inventory of the software systems used to process personal data (PDPA 2022, registration provisions, Part III) | Scan |
TZ-PDPA-PROC Processor Engagement Controls | Processing on behalf of a controller must be governed by adequate guarantees, so third-party software components must have identifiable suppliers (PDPA 2022, controller-processor obligations) | Scan |
TZ-PDPA-BRN Breach Notification Readiness | Personal data breaches must be notified to the Commission, which requires the components of affected systems to be identifiable so impact can be assessed (PDPA 2022, breach-notification duty) | Scan |
TZ-PDPA-DOC Demonstrable Documentation | Accountability to the Personal Data Protection Commission requires software records to be identifiable, timestamped documents (PDPA 2022, accountability and compliance-demonstration duties) | Scan |
Policy templates
All 22 from the standard set, adapted to TZ PDPA.
Tanzania Cybercrimes Act 2015
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
Togo Law No. 2019-014 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.