Zambia's 2021 data protection law — giving individuals rights over their personal data and imposing obligations on organisations that collect, store, and process it.
The Data Protection Act No. 3 of 2021 is Zambia's primary data privacy legislation, regulated by the Zambia Information and Communications Technology Authority (ZICTA). It grants individuals rights including: the right to know what personal data is collected, the right to access and correct their data, the right to object to processing, and the right to have data deleted. Organisations that process personal data must register with ZICTA, obtain consent, and implement security measures. Violations carry fines and potential criminal liability.
A Zambian employer shares an employee's medical records with a third party without consent. The employee files a complaint with ZICTA under the Data Protection Act. ZICTA investigates and orders the employer to stop the disclosure and pay compensation to the employee.
The Advocate covers Zambian law and Scripture — 389 real scenarios across 7 countries with exact rebuttals and law references. Free to start.
Explore Zambian Rights — Free