Cap. 11:22
Data Protection
No. 5/2021
fundamental principles of the protection of privacy, in the context of this
Act;
(d) to submit to any Court any administrative act which is not compliant with
the fundamental principles of the protection of the privacy in the framework of this Act as well as any law containing provisions regarding the
protection of privacy in relation to the processing of data in consultation
with Minister responsible for Information, Publicity and Broadcasting
Services;
(e)
(f)
to advise the Minister on matters relating to right to privacy and access
to information;
to conduct inquiries or investigations either of its own accord or at the
request of the data subject or any interested person, and in relation thereto
may call upon the assistance of experts to carry out its functions and
may request the disclosure of any documents that may be of use for their
inquiry or investigation;
(g) to receive, by post or electronic means or any other equivalent means,
the complaints lodged against data processing and give feed-back to the
claimants or complainants;
(h) to investigate any complaint received in terms of this Act howsoever
received;
(i)
(j)
to conduct research on policy and legal matters relating to the development
of international best practices on the protection of personal information
in Zimbabwe and advise the Minister accordingly;
in consultation with the Minister, to facilitate cross border cooperation
in the enforcement of privacy laws and participating at national, regional
and international forums mandated to deal with the protection of personal
information initiatives.
(2) Subject to this Act, the Authority shall not, in the lawful exercise of its
functions under this Act, be subject to the direction or control of any person or authority.
PART III
Quality of Data
7
Quality of Data
(1) The data controller shall ensure that data processed is—
(a)
adequate, relevant and not excessive in relation to the purposes for which
it is collected or further processed;
(b) accurate and, where necessary, kept up-to-date;
(c)
retained in a form that allows for the identification of data subjects, for
no longer than necessary with a view to the purposes for which the data
is collected or further processed.
(2) The data controller shall take all appropriate measures to ensure that data
processed shall be accessible regardless of the technology used and ensure that the
evolution of technology shall not be an obstacle to the access or processing of such
data.
(3) The controller shall ensure compliance with the obligations set out in
subsections (1) and (2) by any person working under his or her authority and any
subcontractor.
47
DISTRIBUTED BY VERITAS
e-mail: veritas@mango.zw; website: www.veritaszim.net
Veritas makes every effort to ensure the provision of reliable information,
but cannot take legal responsibility for information supplied.