Data Protection Act

This Data Protection Act defines what constitutes personal data, as well as outlines the rights and obligations of parties involved in the processing of personal data, including the data subject, data controller, and data processor. Further, the Data Protection Act establishes the Information and Data Protection Commission ('the Commission'), which will be responsible for ensuring effective application of the Data Protection Act after its commencement and The objective of the Data Protection Act is to provide for the regulation and protection of personal data by providing necessary security safeguards required for the processing of personal data obtained in the processing of an individual's personal information in Botswana. To realise this, the Data Protection Act sets conditions for the lawful processing of personal data, establishes procedures for complaints by data subjects against violations of the Data Protection Act by data controllers, and provides for sanctions in the form of fines and imprisonment.