With the establishment of the Personal Data Protection Commission (PDPC) following the enactment of the Personal Data Protection Act (PDPA), 2022, Tanzania has made significant progress in strengthening personal data protection across both public and private sectors. A key requirement under the PDPA is the mandatory registration of entities that handle personal data with the PDPC.

On 10 January 2025, the PDPC issued a press release reminding data controllers and processors of their obligation to register in accordance with the PDPA. Additionally, the PDPC announced an extension of the registration grace period to 30 April 2025, affording companies and other businesses alike more time to comply with the law. This extension followed an earlier grace period of 31 December 2024 which had been granted by the President of the United Republic of Tanzania, Her Excellency Samia Suluhu Hassan.

This article provides an overview of the registration requirements, addressing key questions such as why registration is necessary, who must register, when and how to register, and the consequences of failure to comply.