Leonard Ncube, [email protected]
THE second edition of the Postal and Telecommunications Regulatory Authority of Zimbabwe (Potraz) Data Privacy Symposium has started in Victoria Falls, with the first masterclass session dedicated to unpacking the legal side of consent in the data field.
The three-day symposium will end on Thursday and is being held under the theme: “Bridging Technology, Policy, Law, and Practice: Towards Strengthening Data Protection in Zimbabwe.”
The issue of consent is a critical aspect across all sectors of the socio-economic spectrum, as it involves the revelation or protection of people’s biometric and sensitive personal data.
The country has enacted several pieces of legislation, including the Cyber Data Protection Act, to safeguard sensitive personal information.
Consent refers to giving permission or agreeing to reveal personal information, whether in the workplace or elsewhere.
Potraz Deputy Director for Advocacy and Compliance, Ms Zvichanzii Mugota, is facilitating the masterclass.
She explained that consent must be in writing, accompanied by a clear “yes, I do”, and must be informed, specific, and meet other legal requirements.
She added that data controllers should ensure the data subject is aware of their rights regarding their personal information, which include the right to be informed, the right to withdraw consent, the right to have their information corrected, and the right to deletion if the information is no longer relevant. All of these rights should be outlined in the consent form.
Ms Mugota also emphasised that consent should have a time limit, and renewal consent must be sought from the data subject. She noted that data subjects have the right to withdraw their information if they no longer wish for it to be used.



