Is your organisation a registered Data Controller? NGOs and CSOs across Zimbabwe are being urged to check their status under the Cyber and Data Protection Act [Chapter 12:07], following the introduction of POTRAZ Guideline CDPG1 of 2025 on the licensing of Data Controllers. Any organisation that collects personal data — whether on staff, members, beneficiaries, donors, volunteers, or website visitors — is likely classified as a Data Controller and is required by law to register with POTRAZ's Data Protection Authority. To support the sector, NANGO has developed a simple step-by-step guide covering how to assess your status, calculate your licensing tier and fee (ranging from $50 to $2,500), and complete the registration process. The registration deadline of 12 March 2025 has already passed, placing non-compliant organisations at risk of penalties that include fines of up to Level 11 and/or imprisonment of up to seven years. NANGO is therefore encouraging all member organisations that have not yet registered to act promptly to bring their operations into compliance. Organisations seeking guidance can reach NANGO's Compliance Support desk on info@nangozim.org or +263 242 708761 / 794973 / 703599. The full step-by-step guide is available to download below.
Data-Controller-Registration-Guideline.pdf