1
Short Title
2
Interpretatio
n
This legislation may be cited as the Data Protection Act, and shall
come into force and effect [on xxx/ following publication in the
Gazette].
(1)Child: refers to a person under the age of eighteen (sixteen)
years and includes an infant
(2) Code of conduct: refers to the data-use charters drafted by
the data controller in order to institute the rightful use of IT
resources, the Internet, and electronic communications of the
structure concerned, and which have been approved by the data
protection authority.
(3) Consent: refers to any manifestation of specific, unequivocal,
freely given, informed expression of will by which the data subject
or his/her legal, judicial or legally appointed representative
accepts that his/her personal data be processed.
(4) Data: refers to all representations of information
notwithstanding format or medium.
(5) Data controller or controller: refers to any natural person
and legal person excluding a public body which alone or jointly
with others determines the purpose and means of processing of
personal data. Where the purpose and means of processing are
determined by or by virtue of an act, decree or ordinance, the
controller is the natural person, legal person or public body
designated as such by virtue of that act, decree or ordinance.
(6) Data controller's representative or controller's
representative: refers to any natural person or legal person
permanently established on the territory of Zimbabwe, who
performs the functions of the data controller in compliance with
obligation(s) set forth in this Act.
(7) Data processor: refers to a natural person or legal person,
which processes personal data for and on behalf of the controller
and under the data controller’s instruction, except for the persons
who, under the direct employment or similar authority of the
controller, are authorised to process the data.
(8) Data protection officer or DPO: refers to any individual
appointed by the data controller and is charged with ensuring, in
an independent manner, compliance with the obligations provided
for in this law.
(9) Data subject: refers to an individual who is an identifiable
person and the subject of personal data.
Draft Data Protection Bill Version 1.0
6