Status
In force
Consent model
Opt-in
Primary law
Personal Data Protection Act 2022
Year
2022
Authority
Personal Data Protection Commission (PDPC)
Marketing consent
Consent-first with registration duties.
Transfers
Transfers abroad need a Commission permit or an adequate destination.
Penalties
Administrative fines set by the PDPC up to TZS 100M; criminal fines for companies reach TZS 5B.
The framework
Tanzania regulates personal data through the Personal Data Protection Act 2022, supervised by the Personal Data Protection Commission.
For advertisers the consent posture matters most, and Tanzania sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Personal Data Protection Act 2022
2022 · In force
In force since mid-2023 with regulations and an operating commission; registration deadlines have passed, and the PDPC has begun compliance sweeps.
Marketing and advertising
Consent-first with registration duties. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad need a Commission permit or an adequate destination.
Enforcement and penalties
Administrative fines set by the PDPC up to TZS 100M; criminal fines for companies reach TZS 5B.
Cite this page: "Tanzania Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/tanzania.html. Accessed [date].