As more Africans connect online, concerns about the inadequate protection of personal information are fueling a growing focus on data privacy and regulatory control in digital communications. This shift reflects broader global efforts to strengthen data protection in online spaces.

Zimbabwe’s Minister of ICT, Postal, and Courier Services, Tatenda Mavetera, announced new regulations mandating that all WhatsApp group administrators register and obtain a license from the Post and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ). The announcement was made at the POTRAZ breakfast meeting on Wednesday, November 6.

This licensing, which starts at a minimum fee of $50, will apply to various groups, including businesses, community organizations, and churches. Non-compliance could result in penalties, and POTRAZ advises groups to seek guidance on fulfilling the new obligations.

Minister Mavetera emphasized the new requirements as essential for enhancing data privacy and security, impacting any group that collects personal information. "Even churches who collect personal data ought to have such a license and appoint a Data Protection Officer (DPO)," she explained, underlining the government’s intent to strengthen data security for all citizens.

Zimbabwe enacted the Data Protection Act in 2021 to safeguard personal data and regulate its handling across all digital platforms. With WhatsApp groups commonly used for communication, government entities argue that requiring licenses for group admins and Data Protection Officers aligns with the Act’s mandate to protect personal information from potential misuse.

The Postal & Telecommunications Sector Abridged Performance Report for Q2 2024 reveals that mobile internet and data traffic in Zimbabwe increased by 12.5%, climbing from 58.44 petabytes in Q1 2024 to 65.75 petabytes in Q2. This rise likely reflects consumers' growing reliance on mobile data for internet access, with social media being a major contributor to this consumption.

Alongside the license, group admins must appoint a certified DPO, a role mandated by Zimbabwe’s Data Protection Act. The Act defines personal data as any information that can identify a person, and the government asserts that group admins, having access to members' phone numbers, need to protect such data accordingly.

Hikmatu Bilali