Eswatini Data Protection Authority

If you are a data controller or data processor,

Registration is from:

1 March 2024 - 30 September 2024

REGISTRATION GUIDE

REGISTRATION FEES

Register With

Eswatini Data Protection Authority

In compliance with Data Protection Act, 2022, all entities involved in the processing of personal data are required to undergo registration with the Eswatini Data Protection Authority (EDPA). This stringent measure is implemented to safeguard the rights and privacy of individuals within the Eswatini

Register As A

Data Controller

Registering as a Data Processor is a pivotal step toward compliance with the Data Protection Act, 2022. “Data controller” means a public or private body which or any other person designated by law, who alone or together with others, determines the purpose of and means for processing personal information, regardless of whether or not such data is processed by that party or by a data processor on its behalf, where the purpose and means of processing are determined by law

Register As A

Data Processor

Registering as a Data Processor is a pivotal step toward compliance with the Data Protection Act, 2022. “Data processor” refers to a natural or legal person, or public body which processes personal information for and on behalf of a data controller and under the instructions of a data controller and excludes persons who are authorised to process data under the direct authority of a data controller

Report A Data Breach

Under the Data Protection Act, all data controllers are required to report the personal Data Breaches with the EDPA within 72 hours of the business becoming aware of the breach

Who We Are

The Eswatini Data Protection Authority (EDPA) is charged with the mandate to administer and foster compliance under the Data Protection Act, 2022. The Act designates the Eswatini Communications Commission as the National Data Protection Authority (EDPA) to regulate how personal information is handled, investigate breaches in the handling of information, and resolve any complaints relating to data breaches. (Learn More)

DOWNLOAD ACT

File A Complaint

→

To address a concern, file a complaint against an organization regarding data-related issues.

Report A data Breach

The Data Protection Act mandates data controllers to report personal data breaches within 72 hours of business awareness.

→

Registering as a Data Controller is crucial for compliance with the Data Protection Act, 2022.

→

Data Protection Principles

The processing of personal data should be lawful and fair, transparent to individuals about its collection, use, consultation, and extent.

→

Data Protection Rights

Understand your data protection rights, which include the right to have your personal information protected.

→

Campaigns

Join us in celebrating the National Data Protection Week 2024 !

→

Publications

Stay up to date with urgent notices

→

We invite the public to join us this National Data Protection Week through our social media platforms, radio, TV and print media as we raise awareness, promote data protection best practices, and discuss important privacy-related topics to remind organizations and individuals why they should care about data privacy.

Mvilawemphi Dlamini

ESCCOM Chief Executive

As the EDPA we recognise the week of 22-28 January as the National Data Protection Week, during which we urge entities (data controllers and data processors) and other actors to organise activities to raise awareness about the importance of data protection and to promote best practices with regards to processing personal information

Mvilawemphi Dlamini

ESCCOM Chief Executive

Entities who in terms of the Act are data controllers and data processors on the other hand need to make sure that they keep their customers’ data always protected and in accordance with the data protection principles and other applicable legal frameworks on data protection. Risk should always be managed, and to create trust, the entities should be transparent on how they are collecting, using, and sharing personal dat

Mvilawemphi Dlamini

ESCCOM Chief Executive

The Data Protection Act refers to the Commission in a rather different way from what you have known the Commission to be, it expands its mandate and designates the Commission as the Eswatini Data Protection Authority responsible for administrating the Act and ensuring compliance, but mostly to ensure that personal information is processed lawfully, and the rights of data subjects are protected.

Mvilawemphi Dlamini

ESCCOM Chief Executive