Personal Data Protection Act, 2022, transborder data flow
Personal Data Protection Act 2022 (Act No. 11 of 2022), Part V (ss. 31-32, transfer of personal data to states with and without adequate data protection)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 1 May 2023.
A cross border transfer rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Before transferring personal data outside Tanzania, confirm the recipient country provides an adequate level of data protection or that another condition under sections 31-32 is satisfied.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Personal data may be transferred to a country with an adequate personal-data-protection legal framework where the recipient establishes that the transfer is necessary and can subsequently verify that necessity, and the data controller ensures the recipient processes the data only for the purpose for which it was transferred.
A transfer to a country without such a framework is permitted only where an adequate level of protection is otherwise ensured and the data is transferred solely to permit authorised processing.
When LexLint raises it
crawls_webtrains_models