PDPC sets April 8, 2026 as final deadline for data registration

The Personal Data Protection Commission (PDPC) has given a final warning to all public and private organisations that collect or process personal information to complete their registration by April 8, 2026. From April 9, 2026, the law will be strictly enforced, and any institutions that fail to register will face legal consequences, including fines of up to 5 billion Tanzanian shillings. PDPC Director General, Mr Emmanuel Mkilia, said the government has allowed sufficient time for all institutions to prepare, starting from the Commission’s launch in April 2024. The registration period has already been extended twice, with the latest extension announced by the Minister for Communication and Information Technology, Angellah Kairuki. The Personal Data Protection Act, Chapter 44, applies to many sectors including government agencies, banks, insurance companies, hospitals, schools, universities, telecom companies, manufacturing, tourism, transport, construction, political parties, unions, religious bodies, and NGOs. Non-compliance may lead to fines or imprisonment depending on whether it involves individuals or institutions. The PDPC stressed that the law protects citizens’ privacy and builds trust between service providers and customers, which is crucial for Tanzania’s digital economy and attracting investment.