Duties of Zim AI Regulatory Authority

Everything AI
Dr Edward Sagomba
FOR the past two weeks, I have been proposing that Government through the Ministry of Information Communication Technology, Postal and Courier Services, urgently ensure that the country develops and implements the Zimbabwe Artificial Intelligence Governance Regulatory Framework (ZAIGRF).
The proposed Artificial Intelligence Governance Regulatory framework (AIGRF), can be implemented by yet another entity I proposed named the Zimbabwe Artificial Intelligence Regulatory Authority (ZAIRA).
This week as a continuation of last week’s article, I am giving our readers the responsibilities of this AI Regulatory Authority.
As a recap dear reader, I am proposing, the ZAIRA, which will be the central body responsible for overseeing the implementation of the ZAIGRF.
Why ZAIRA?
Technological advancements are impacting our lives faster than ever before, with the introduction of Artificial Intelligence (AI) leading the charge.
AI has quickly become a critical part of our lives, transforming business sectors, promoting innovation, and significantly changing how we live and work. However, while numerous AI technologies are gaining popularity, they raise moral, legal, and social concerns.
As such, many countries worldwide are adopting legislation to regulate AI’s design, deployment, and use.
It is imperative that Zimbabwe follows suit and establishes an AI Regulatory Authority — ZAIRA, whose main aim should be to ensure the responsible and ethical development of AI within our borders.
AI regulations across different countries
It is imperative to note that most developed countries have already established their own AI regulatory authorities. First, the leading country in AI technology, the United States employs a decentralised model of AI regulation, this is a reflection of the United States’ general approach to governance.
Most regulatory practices and policies are focused on sectoral levels, with no comprehensive federal regulation framework for AI.
However, several sector-specific AI-related agencies and organisations address challenges arising from the development and deployment of AI technologies. The US for example has the Federal Trade Commission (FTC) whose main target is consumer protection, also FTC seeks to apply fair and transparent business practices in AI applications.
The National Highway Traffic Safety Administration (NHTSA) regulates the safety aspects of AI-powered technologies, specifically in autonomous cars. However, individual states like California have implemented their regulations, such as the California Consumer Privacy Act (CCPA), which imposes strict requirements on businesses processing consumer data, including those using AI technologies.
At the continental level, the European Union (EU) has adopted a proactive approach to AI legislation, driven by measures like the General Data Protection Regulation (GDPR) and the planned Artificial Intelligence Act (AIA).
The EU set up these two to set strict guidelines for gathering, using, and preservation of personal information.
Additionally, these two complement each other and they both assist the EU to become the global leader in regulating ethical standards and promoting competitiveness and innovation in AI deployment.
Our friends from the East, China have established the Chinese Cybersecurity Law (CCL) and the New Generation AI Development Plan (NGAIDP) which seeks to provide measures for data protection and cybersecurity in AI. Both the CCL and NGAIDP put emphasis on compliance and risk management.
Other countries like Canada and Australia have established AI regulatory authorities. Canada has introduced key government-led programmes, such as the Pan-Canadian AI Strategy (PCAI) and the Canadian AI Ethics Council (CAIEC), the main aim of these two is to advocate for responsible AI development and address relevant ethical issues.
Additionally, Canada has also established the Personal Information Protection and Electronic Documents Act (PIPEDA), which regulates the collection, use, and disclosure of individuals’ personal information using AI technologies.
In the same vein, Australia has the National Artificial Intelligence Ethics Framework (NAIEF) which directs the ethical principles that guide AI systems’ development and implementation process.
NAIEF complements other Australian regulatory authorities, such as the Australian Competition and Consumer Commission (ACCC), in enforcing regulations and ensuring that competition and consumer protection laws are adhered to during AI applications.
Over and above the countries, we have regulatory authorities at the international level, with organisations such as the Organisation for Economic Co-operation and Development (OECD) and the United Nations which are actively involved in setting and outlining global guidelines on AI regulation.
The OECD’s AI principles call for transparency, responsibility, and inclusion in AI development and implementation.
Similarly, the United Nations Sustainable Development Goals underscore the importance of using AI to achieve global benefits and sustainability.
What about Africa?
At the continental level in Africa, we currently have an Artificial Intelligence Regulatory Authority (AIRA) which is the African Union Convention on Cyber Security and Personal Data Protection (AUCCSPAP) often referred to as the Malabo Convention.
AIRA acts as a framework that regulates the collection and processing of personal data across African member states.
It is important to note that first, this is not explicitly an AI regulation, rather the Malabo Convention’s declarations are currently being used to regulate AI systems, particularly those that handle personal data. Second, the Malabo Convention binds all African states and provides for a coordinated approach to AI regulation across the African continent.
Third, and most importantly is that the Malabo Convention calls on all individual African countries to take responsibility for implementing the convention’s principles by establishing their own data protection authorities (DPAs).
It is against this background that Zimbabwe must act swiftly to establish an AI Regulatory Authority (ZAIGRF) similar to those in other countries. By doing so, Zimbabwe can ensure the responsible and ethical development of AI, protect our citizens’ privacy, and promote innovation and competitiveness in the global AI landscape.
What are the key responsibilities of the proposed ZAIRA?
The first responsibility will be providing regulatory oversight. Particularly, enforcing compliance with the Zimbabwe Artificial Intelligence Governance Regulatory Framework (ZAIGRF) guidelines and standards.
Including conducting regular audits and inspections of AI systems to ensure adherence to ethical and legal requirements. When there are concerns from Zimbabwean citizens on a particular AI application, ZAIRA should investigate and address any violations or breaches of the framework.
Second is policy development, ZAIRA should be responsible for developing and updating policies related to AI governance and regulation. In addition, it should ensure that policies are aligned with international best practices and emerging trends in AI technology.
Third, regarding licensing and certification, ZAIRA should be the entity that issues licenses and certifications for AI developers and organisations. Including establishing the criteria for licensing and certification, and ensuring that only qualified entities are authorised to develop and deploy AI systems.
Fourth, Data Protection and Privacy (DPD) is critical ZAIRA can work with other organisations like POTRAZ to oversee the implementation of data protection and privacy regulations. Moreso, ensure that AI systems comply with data protection laws and safeguard personal information.
Fifth, AI impact assessment, AI systems must be assessed before they are deployed for use Review and approve AI impact assessments for all AI projects. Therefore, ZAIRA should guide on mitigating potential risks and maximising the benefits of AI technologies.
Sixth, Public Engagement and Education (PEE), as a regulatory authority ZAIRA should then be responsible for conducting public awareness campaigns to educate Zimbabwean citizens about AI technologies and their implications, including organising workshops, seminars, and training programs to build capacity and knowledge in the AI field.
Seventh, the issue of collaboration and partnerships is critical when it comes to AI technologies. ZAIRA should therefore facilitate collaboration between Government, industry, academia, and civil society. In addition to promoting partnerships that drive AI innovation and ensure responsible AI governance.
Eighth, AI is continuously developing therefore there is a need for constant Research and Development (RD). ZAIRA should be the leading authority in supporting research and development initiatives in the AI field and providing and approving funding and resources for innovative AI projects that align with national development priorities.
Ninth, AI requires Monitoring and Evaluation (ME). ZAIRA should have the capacity to continuously monitor and evaluate the effectiveness of the ZAIGRF and collect and analyse data on AI development and deployment to inform effective policy decisions.
Tenth, last but not least, ZAIRA must be able to implement Crisis Management Protocols (CMPs). There is a need for the ZAIRA to develop and implement crisis management protocols to address any adverse events or incidents related to AI technologies. This helps to ensure that there are mechanisms in place to respond swiftly and effectively to any AI-related crises.
NB: Please note that the ZAIGRF and the ZAIRA are not official entities in Zimbabwe. These are entities that I am proposing to the Government through the Ministry of Information Communication Technology, Postal and Courier Services (MICTPCS). They are my intellectual creations which I have conceptualised on my own and they should be treated as such (Intellectual property) and any mention must be duly acknowledged as such. All rights reserved.
If you have specific areas that you need to be addressed in the area of AI, contact the editor or email the author directly and the issue will be addressed in the following week’s column.

Dr Evans Sagomba is a Chartered Marketer (CMktr, FCIM) with an MPhil and PhD. He specialises in AI, Ethics, and Policy Research, and is an AI Governance and Policy Consultant. His expertise extends to Ethics of War and Peace and Political Philosophy. Contact: [email protected]/Social media handles; LinkedIn; @ Dr. Evans Sagomba (MSc Marketing)(FCIM )(MPhil) (PhD)/X: @esagomba