Arusha – Operating closed-circuit television (CCTV) cameras without proper registration is a legal offence in Tanzania, the Personal Data Protection Commission (PDPC) has announced.
PDPC directed that all institutions and businesses that collect personal data through surveillance systems to register with the commission before April 8, 2026.
Innocent Mungy, Head of Public Relations and Communications at the PDPC, issued the warning during the 110th Public Education Stakeholders Meeting in Arusha. The meeting was coordinated by the Tanzania Broadcasting Corporation (TBC).
Mr Mungy explained that under the Personal Data Protection Act of 2022, surveillance cameras are classified as tools for collecting personal data.
He noted that the law requires operators to display clear notices informing the public that an area is under surveillance.
“Just as you would post warnings about a dangerous dog, the law requires clear notices informing the public that an area is under surveillance,” Mr Mungy stated during his presentation.
READ MORE: Ndugulile: Privacy and Data Protection Law Is Coming
The requirement aims to ensure transparency, safeguard individual privacy, and protect personal dignity in an increasingly digital environment. The commission has also established strict guidelines regarding the positioning of surveillance equipment.
CCTV cameras must be directed exclusively within the premises owned by the user and must not unnecessarily capture footage of neighbouring properties or public spaces. Pointing cameras towards areas outside the owner’s boundaries without proper authorisation constitutes a violation of privacy rights.
The PDPC later clarified in a public statement that the registration requirement applies specifically to public and private institutions that collect or process personal data.
The commission emphasised that not every individual homeowner with a security camera is required to register, though they must still adhere to the positioning guidelines.
READ MORE: What Happens When Your Personal Data Is Used for Malicious Motives?
Failure to comply with the new regulations carries significant legal consequences.Individuals who suffer harm due to improper CCTV usage may file complaints with the commission and seek compensation based on the extent of the damage.
The commission possesses the authority to impose administrative fines, order compensation payments, or pursue both avenues simultaneously.
In cases involving serious violations or criminal elements, offenders may face prosecution and potential imprisonment.The Personal Data Protection Act, which establishes the legal framework for these regulations, comes into full force on April 8.
Section 14 of the Act explicitly states that a person shall not collect or process personal data without being registered as a data controller or data processor. The legislation aligns the country with global data protection standards, such as the General Data Protection Regulation (GDPR) in Europe.
READ MORE: Manara Accuses Simba SC Chairman Dewji of Phone Spying
Similar privacy frameworks have been implemented across several African nations as governments respond to growing concerns about data security.
The hospitality, retail, healthcare, and education sectors, which rely heavily on surveillance systems, are expected to be significantly impacted by the new compliance requirements.
Organisations are advised to review their surveillance infrastructure, ensure proper signage is installed, and complete the registration process before the deadline.
The PDPC is expected to issue a comprehensive official statement detailing compliance procedures ahead of the implementation date. The commission will also begin nationwide compliance inspections in April to enforce the new data protection standards.
