By 
Zambia’s Office of the Data Protection Commissioner now fully operational, launches enforcement and registration drive.
Zambia’s journey toward a robust data privacy regime has reached a critical milestone with the full operationalisation of the Office of the Data Protection Commissioner (ODPC). The ODPC is now actively enforcing the Data Protection Act 2021 (DPA), which governs the collection, use, processing, storage, and transmission of personal data in the country.
RELATED: Nigeria strengthens data protection framework with NDP Act GAID directive
The DPA, which came into effect in April 2021, saw further progress in June 2023 with the appointment of the country’s first Data Protection Commissioner, as mandated under the law. Now, the ODPC is fully functional, initiating regulatory enforcement and public compliance campaigns aimed at promoting transparency, accountability, and data security.
According to Bwalya Chilufya-Musonda, a Partner at the law firm Bowmans Zambia, the activation of the ODPC marks a turning point in Zambia’s data governance landscape. “The complete operationalisation of the ODPC is a significant milestone in Zambia’s developing privacy and data protection framework. The ODPC has already issued key regulations and guidelines in line with its authority under the DPA,” she stated.
In a further step toward compliance enforcement, the ODPC has launched an online registration portal for data controllers and data processors, making registration mandatory for all entities handling personal data in Zambia. The deadline for registration is 30 April 2025.
Joshua Mwamulima, also a Partner at Bowmans Zambia, warns that non-compliance comes with steep penalties. “Failure to register by the deadline is a criminal offence punishable by a fine of ZMW 200,000 (approximately USD 7,186) and/or imprisonment for up to five years. We expect enforcement activities to intensify after the registration deadline,” he said.
Both legal experts urge businesses, organisations, and public institutions operating in Zambia to assess their compliance status and align with the requirements of the DPA to avoid regulatory sanctions.
The operational launch of the ODPC reaffirms Zambia’s commitment to upholding data privacy rights, improving digital trust, and fostering a secure data ecosystem that aligns with global data protection standards.
