BY THE ARUSHA NEWS REPORTER
Tanzania will begin enforcing its Personal Data Protection law on April 8, 2026, with authorities warning that operating CCTV cameras without registration will be a punishable offence.
The Tanzania Personal Data Protection Commission (PDPC) says all individuals and institutions using surveillance systems must register and comply with strict data protection rules or face fines, compensation claims or possible imprisonment.
Speaking in Arusha at the 110th Public Education Stakeholders Meeting (WASHITIRI) last week, the PDPC Head of Public Relations and Communications, Mr Innocent Mungy, said CCTV cameras are legally recognised as data-collection tools and therefore fall under the law.
He emphasised that camera owners must display clear, visible notices informing the public that surveillance is in place. “Failure to comply with the required procedures constitutes a legal offence,” Mr Mungy warned.
Under the law, individuals and organisations using CCTV systems are required to register with the PDPC as data controllers or processors, as surveillance footage is classified as personal data.
The process involves submitting an application outlining the nature and purpose of data collection, along with relevant identification or business registration documents, either through the PDPC’s online system or at its offices.
Registration fees start at approximately TZS 100,000 for individuals and small entities, increasing depending on the size of the organisation. Authorities say certificates are issued upon review and compliance also requires users to display clear notices and ensure cameras do not infringe on the privacy of others.
Mr Mungy added that improper use of CCTV, such as capturing areas beyond one’s property, violates privacy rights and may lead to legal action. Victims of misuse have the right to file complaints and seek compensation depending on the harm suffered.
The Commission is empowered to impose penalties, order compensation or escalate cases to criminal proceedings where necessary. Mr Mungy also urged businesses and institutions, including hotels, clubs, night spots, schools and hospitals, among others, to ensure they are registered with the PDPC before the law takes effect.
The legislation is aimed at strengthening personal data protection and safeguarding individual privacy, which authorities say is fundamental to human dignity.
