Applicant details
Operational information, entity type (public, private, NGO), and details of the designated Data Protection Officer.
Who we are
We specialize in safeguarding your sensitive information and ensuring compliance with data privacy laws. Our certified Data Protection Officers will help your business stay secure and mitigate risks in today’s data-driven world.
POTRAZ · SI 155 of 2024
A practical path to a Data Controller Licence from POTRAZ. We prepare the application pack, name a certified DPO, and keep the filing aligned with the Act and the regulations.
Cyber and Data Protection Act [Chapter 12:07] · Statutory Instrument 155 of 2024
Licensing process
Fill out the Application or Renewal Form.
Remit the applicable POTRAZ fee.
File the complete application with POTRAZ.
POTRAZ evaluates the file and responds within 14 days.
The Authority communicates its official decision.
Key information in Form DP1
Operational information, entity type (public, private, NGO), and details of the designated Data Protection Officer.
Data subjects, types of data collected, purpose of processing, recipients, and legal grounds for processing.
Disclosure of sensitive categories such as medical records, biometric data, and race, plus the grounds for processing.
Third-party processors and confirmation that written contracts are in place.
International transfers or storage need separate authorisation, together with documented safeguards such as access controls and encryption.
Signed declaration and an accompanying Certificate of Incorporation.
Requirements and next steps
A certified Data Protection Officer must be named on Form DP1.
Attach the certificate to the submission pack.
Document the risks, active controls, and encryption measures in force.
How we protect
Protecting your sensitive information is our top priority. Our solutions are designed to ensure your data remains safe and secure.
Safeguard your data with advanced encryption techniques that protect your information from unauthorized access.
Enhance security with multi-factor authentication, ensuring that only authorized users can access your sensitive data.
The workspace
Operate tenant oversight, CDPA assessments, evidence, and staff training in one workspace. Open the live demo to walk the cockpit, a Human Capital Risk Assessment, and a data-protection course.
Common questions
Straight answers on the CDPA, Form DP1, and what POTRAZ expects before a Data Controller Licence is granted.
Organisations that decide how personal data is collected and used in Zimbabwe must apply to POTRAZ under the Cyber and Data Protection Act [Chapter 12:07] and Statutory Instrument 155 of 2024.
After you file the pack, the Authority evaluates the application and communicates a decision within 14 days.
Yes. A certified Data Protection Officer must be designated on the form. We can fill that role through DPO-as-a-Service.
Completed Form DP1, the application fee, a Certificate of Incorporation, and a written record of risks, access controls, and encryption measures.
A DPO oversees data-protection strategy, trains the organisation, and acts as the contact point for data subjects and POTRAZ.
Yes. We complete Form DP1, assemble the pack, name a certified DPO, and keep the filing aligned with the Act and the regulations.
