The Personal Data Protection Commission (PDPC) has issued a final reminder to all public and private institutions in Tanzania that collect or process personal data to complete their registration and obtain a certificate of compliance under the Personal Data Protection Act.
Pursuant to Section 14(1) of the Personal Data Protection Act, all data controllers and processors are legally required to register with the PDPC.
The Government has granted a final extension for voluntary registration up to 8 April 2026. After this date, entities that have not registered will be subject to enforcement action in accordance with the law.
This requirement applies to all organisations (public and private) that
Affected entities are required to:
Failure to register within the prescribed timeline may result in:
Our firm provides end-to-end support on data protection compliance, including:
Given the short timeline, organisations are strongly encouraged to act promptly to ensure compliance before the deadline.
For any queries regarding this notice or for assistance with the submission of Beneficial Ownership information, please contact Ms. Nancy Tarimo via email at n.tarimo@rexattorneys.co.tz
Disclaimer:
This notice is of a general nature and is provided for information purposes only. The information contained herein constitutes general professional commentary and does not amount to legal or professional advice. This notice is not intended to address the circumstances of any specific company. While the information is accurate as at the date of publication, no guarantee is given that it remains accurate at the time it is received or that it will continue to be accurate in the future due to changes in law or practice. No action should be taken based on this notice without obtaining appropriate professional advice and conducting a thorough assessment of the relevant circumstances.