Governance & Compliance
Data protection & governance
The Cyber and Data Protection Act put obligations on every organisation in Zimbabwe that holds personal information: register as a data controller, appoint a data protection officer, and be able to show how that information is handled. We assess where you stand, close the gaps, and hold the officer's role for you if you would rather not staff it.
What you end up with
A registered, documented compliance position you can put in front of a regulator or a client.
What you get
- CDPA assessment — what personal data you hold, where it sits, and where you stand against the Act
- Data protection as a service: a data protection officer on retainer
- Data protection representation in dealings with POTRAZ and in client due diligence
- Corporate governance advisory for boards, audit committees and risk registers
- Privacy notices, consent records, retention schedules and processor agreements
- Breach response plan, rehearsed before you need it rather than written after
The assessment comes first, and it is deliberately unflattering: a register of the personal data you hold, the basis you are relying on to hold each of it, and a gap list ranked by what a complaint would actually cost you.
Most organisations here do not have the volume to justify a full-time data protection officer, but the Act still expects the role to exist and to be reachable. Holding it on retainer is usually the proportionate answer — you get the appointment, the register, the filings and someone to answer a data subject request, without the headcount.
Governance advisory sits alongside it because the obligation lands on the board. We write the papers into the risk register the board already uses, so data protection gets reported like any other exposure rather than as a technical annexe nobody opens.
The assessment and the officer's role are both delivered remotely. Data protection law has landed across much of Africa and the obligations rhyme even where the statute differs, so we hold the same brief for clients outside Zimbabwe.
Request a quote
Talk to us about Data protection & governance
Tell us the size of the estate and what is going wrong. We will tell you what an assessment would cover and what it costs.