Cyber Security and Data Protection
(f)
provide guidelines to public and private sector interested parties on matters
relating to awareness, training, enhancement, investigation, prosecution
and combating cyber crime and managing cyber security threats;
(g) oversee the enforcement of the Act to ensure that it is enforced reasonably
and with due regard to fundamental human rights and freedoms;
(h) provide technical and policy advice to the Minister;
(i) advise the Minister on the establishment and development of a
comprehensive legal framework governing cyber security matters.
5
PART III
Data Protection Authority
10
7
15
The Postal and Telecommunications Regulatory Authority established in terms
of the Postal and Telecommunications Act [Chapter 12:05] is hereby designated as the
Data Protection Authority.
8
20
25
30
35
40
45
Designation of Postal and Telecommunications Regulatory Authority
as Data Protection Authority
Functions of Data Protection Authority
(1) The Authority shall perform the following functions—
(a) to regulate the manner in which personal information may be processed
through the establishment of conditions for the lawful processing of data;
(b) to promote and enforce fair processing of data in accordance with this
Act;
(c) to issue its opinion either of its own accord, or at the request of any person
with a legitimate interest, on any matter relating to the application of the
fundamental principles of the protection of privacy, in the context of this
Act;
(d) to submit to any Court any administrative act which is not compliant
with the fundamental principles of the protection of the privacy in
the framework of this Act as well as any law containing provisions
regarding the protection of privacy in relation to the processing of data
in consultation with Minister responsible for Information, Publicity and
Broadcasting Services;
(e) to advise the Minister on matters relating to right to privacy and access
to information;
(f) to conduct inquiries or investigations either of its own accord or at the
request of the data subject or any interested person, and in relation thereto
may call upon the assistance of experts to carry out its functions and
may request the disclosure of any documents that may be of use for their
inquiry or investigation;
(g) to receive, by post or electronic means or any other equivalent means,
the complaints lodged against data processing and give feed-back to the
claimants or complainants;
(h) to investigate any complaint received in terms of this Act howsoever
received;
(i) to conduct research on policy and legal matters relating to the development
of international best practices on the protection of personal information
in Zimbabwe and advise the Minister accordingly;
(j) in consultation with the Minister, to facilitate cross border cooperation
in the enforcement of privacy laws and participating at national, regional
7