Data Protection Act
ZambiaAct of Parliament2021
The Data Protection Act is an Act of the Parliament of Zambia enacted in 2021. It contains 93 sections. Read its sections below, or ask Levy any question about the Data Protection Act and get an answer grounded in the Act with citations.
Sections of the Data Protection Act
- S. 1Short title and commencement
- S. 2Interpretation
- S. 3Application
- S. 4Establishment of Office of Data Protection Commissioner
- S. 5Data protection Commissioner
- S. 6Appointment of Deputy Data Protection Commissioners and other staff
- S. 7Inspector
- S. 8Power of inspectors
- S. 9Arrest without warrant
- S. 10Seizure of property
- S. 11Restoration of property
- S. 12Principles relating to processing of personal data
- S. 13Processing of personal data
- S. 14Processing of sensitive personal data
- S. 15Consent, justification and objection
- S. 16Collection of personal data
- S. 17Processing of child and vulnerable person’s personal data
- S. 18Offence and penalty for contravention of personal data obligation
- S. 19Prohibition from controlling or processing personal data without
- S. 20Application for registration as data processor or data controller
- S. 21Registration of data controller and data processor
- S. 22Renewal of certificate of registration
- S. 23Change in details of data controller or data processor
- S. 24Suspension and cancellation of registration
- S. 25Re-registration
- S. 26Surrender of certificate of registration
- S. 27Exemption from registration
- S. 28Power to forbear
- S. 29Data auditors
- S. 30Application for licence
- S. 31Issue of licences
- S. 32Conditions of licence
- S. 33Variation of licence
- S. 34Surrender of licence
- S. 35Transfer of licence
- S. 36Suspension and cancellation
- S. 37Renewal of licence
- S. 38Functions of a data auditor
- S. 39National security, defence and public order
- S. 40Prevention, detection investigation and prosecution of contraventions of
- S. 41Processing for purpose of legal proceedings
- S. 42Research, archiving or statistical purpose
- S. 43Journalistic purpose
- S. 44Processing to be lawful and legitimate
- S. 45Record of processing activities
- S. 46Data protection impact assessment
- S. 47Security of processing
- S. 48Appointment of data protection officer
- S. 49Notification of security breach
- S. 50Accountability
- S. 51Data retention
- S. 52Duties of data processor
- S. 53Non-disclosure of personal data
- S. 54Joint controllers
- S. 55Offence by data controller
- S. 56Personal data in legal proceedings
- S. 57Notification
- S. 58Right of access and notification
- S. 59Right to rectification
- S. 60Right to erasure
- S. 61Right of objection
- S. 62Decision taken on basis of automatic data processing
- S. 63Right to restriction of processing
- S. 64Information when personal data collected directly from data subject
- S. 65Right to data portability
- S. 66Notification obligation
- S. 67Derogation from rights
- S. 68Complaints
- S. 69Appeals
- S. 70Crossborder transfer of personal data
- S. 71Conditions for crossborder transfer of personal data
- S. 72Right to compensation
- S. 73Offences
- S. 74Power of Data Protection Commissioner to compound certain
- S. 75Forfeiture
- S. 76Offence by principal officer, shareholder or partner of body corporate
- S. 77General penalty
- S. 78Code of conduct
- S. 79Guidelines
- S. 80Register
- S. 81Auditing of data controller
- S. 82Regulations
- S. IPRELIMINARY PROVISIONS
- S. IIOFFICE OF THE DATA PROTECTION COMMISSIONER
- S. IIIINSPECTORATE
- S. IVPRINCIPLES AND RULES RELATING TO PROCESSING OF PERSONAL DATA
- S. IXRIGHTS OF THE DATA SUBJECT
- S. VREGULATION OF DATA CONTROLLERS, DATA PROCESSORS AND DATA AUDITORS
- S. VIDATA AUDITORS
- S. VIIEXEMPTION FROM PRINCIPLES AND RULES OF PROCESSING OF DATA
- S. VIIIDUTIES OF DATA CONTROLLER AND DATA PROCESSOR
- S. XTRANSFER OF PERSONAL DATA OUTSIDE THE REPUBLIC
- S. XIGENERAL PROVISIONS