Every organisation in Zambia handles personal data about customers, employees, patients, pupils or members of the public. This course explains Zambia’s data protection law in practical terms for the organisations that decide how data is used (data controllers) and the suppliers that handle it for them (data processors), such as payroll bureaus, IT and cloud providers and call centres.
It covers the Data Protection Act 2021, the Registration and Licensing Regulations 2021, the ODPC’s Code of Conduct and related laws, with practical Zambian examples. The focus is on principles that do not change: a lawful basis before processing, transparency, minimisation, security by design, accountability with evidence, and the rights of the people the data is about.
Fines, fees, response times and notification periods are shown as 2026 examples and are expected to change. All of them are collected in a dated reference table at the end of the course. Always confirm any figure with the ODPC or a qualified adviser before you act.
What you will learn
- How Zambia’s data protection laws and the ODPC fit together
- Who must register with the ODPC, and the accountability records to keep
- The principles, lawful grounds, sensitive and children’s data, notices and direct marketing
- How to handle rights requests, appoint a Data Protection Officer and run DPIAs
- How to secure data, respond to breaches, manage processors and handle cross-border transfers and local storage
- How to handle employee data, CCTV, websites and AI tools, and how enforcement and penalties work
Who it is for
Compliance officers and Data Protection Officers, HR, IT and security staff, marketing and customer-service staff, managers and business owners, and suppliers that process personal data for clients.
How the course works
There are five modules, each with four lessons and a short quiz. You need 70% on each quiz to complete the course and earn your certificate.
Reviews
There are no reviews yet.