Compliance FrameworksMiddle East & Africa
Zimbabwe Cyber and Data Protection Act 2021
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | ZW CDPA |
| Region | Middle East & Africa |
| Country or scope | Zimbabwe |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers ZW CDPA
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
ZW-CDPA-SEC Security of Processing | Data controllers must take appropriate technical and organisational measures to protect data against accidental or unauthorised destruction, loss, access or alteration, evidenced by integrity hashes on processing components (Cyber and Data Protection Act 2021, security obligations, Part IV) | Scan |
ZW-CDPA-BRN 24-Hour Breach Notification Readiness | Security breaches must be notified to the Data Protection Authority within 24 hours, a deadline that requires affected components to be immediately identifiable (Cyber and Data Protection Act 2021, breach-notification duty) | Scan |
ZW-CDPA-PROC Processor Oversight | Controllers must ensure persons processing on their behalf act under contract and with sufficient security guarantees, so third-party software components must have named suppliers (Cyber and Data Protection Act 2021, controller-processor provisions) | Scan |
ZW-CDPA-INT Tamper Detection for Computer Systems | Unauthorised interference with data and computer systems is criminalised, so operators should keep exact component versions to detect and investigate tampering (Cyber and Data Protection Act 2021, cybercrime offences, Part III) | Scan |
ZW-CDPA-INV Processing System Inventory | Accountability to POTRAZ for all processing operations presupposes an inventory of the software systems that process personal data (Cyber and Data Protection Act 2021, accountability and licensing provisions) | Scan |
ZW-CDPA-DOC Traceable Documentation | Demonstrating compliance to the Authority requires software records to be identifiable, timestamped documents (Cyber and Data Protection Act 2021, compliance-demonstration duties) | Scan |
Policy templates
All 22 from the standard set, adapted to ZW CDPA.