8. The GDPR Influence on the Tanzanian Data Privacy Law and Practice

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

GDPR, Recital 171; Article 99.

See various decisions, reports, and surveys of the European Commission at http://​ec.​europa.​eu/​justice/​data-protection/​document/​index_​en.​htm. Accessed 4 December 2019; see also 1st–13th annual reports of the Article 29 Working Party on Data Protection http://​ec.​europa.​eu/​justice/​data-protection/​article-29/​documentation/​annual-report/​index_​en.​htm. Accessed 4 December 2018; Article 29 Working Party on Data Protection’s Opinions, Working Documents and Recommendations (1997–2011), http://​ec.​europa.​eu/​justice/​data-protection/​article-29/​documentation/​opinion-recommendation/​index_​en.​htm. Accessed 4 December 2019.

Reding 2011.

Ibid.

Ibid.

Ibid.

Ibid., pp. 3–5; see also European Commission 2010.

GDPR, Article 1.

GDPR, Article 2.

Explanatory Memorandum to the First Draft Proposal of the Regulation, p. 8.

GDPR, Article 17.

Case C-131/12, Judgment of the Court (Grand Chamber), 13 May 2014.

GDPR, Article 20.

GDPR, Article 35.

GDPR, Article 37.

GDPR, Articles 33, 34.

GDPR, Recital 106.

Non-union matters refer to all the matters that are not listed in the First Schedule of the Tanzanian Constitution.

URT Constitution 1977, Articles 30(5), 64(5).

Katiba ya Zanzibar ya 1984, Ibara ya 4.

URT Constitution 1977, Article 4(1) and Katiba ya Zanzibar ya 1984, Ibara ya 26.

Ibid., Article 64 and Ibara ya 78 respectively.

Mgaya 1994.

Ibid.

Makulilo 2006.

Tanzania Communications Regulatory Authority 2010 Report on internet and data services in Tanzania: A supply-side survey. http://​www.​tcra.​go.​tz/​publications/​InternetDataSurv​eyScd.​pdf. Accessed 4 December 2019.

Ibid.

Ibid.

The Citizen 2010 Mobile Phone Users now top 17 million. Tanzania Communications Regulatory Authority 2010 Report on internet and data services in Tanzania: A supply-side survey. http://​www.​tcra.​go.​tz/​publications/​InternetDataSurv​eyScd.​pdf. Accessed 4 December 2019.

This provision states as follows:

“It is hereby declared that the provisions contained in this Part (Bill of Rights) of this Constitution which set out the principles of rights, freedom and duties, do not render unlawful any existing law or prohibit the enactment of any law or the doing of any lawful act in accordance with such law for the purposes of: (a) ensuring that the rights and freedoms of other people or of the interests of the public are not prejudiced by the wrongful exercise of the freedoms and rights of individuals; (b) ensuring the defence, public safety, public peace, public morality, public health, rural and urban development planning, the exploitation and utilisation of minerals or the increase and development of property of any other interests for the purposes of enhancing the public benefit; (c) ensuring the execution of a judgement or order of a court given or made in civil or criminal matter; (d) protecting the reputation, rights and freedoms of others or the privacy of persons involved in any court proceedings, prohibiting the disclosure of confidential information or safeguarding the dignity, authority and independence of the courts; (e) imposing restrictions, supervising and controlling the information, management and activities of private societies and organisations in the country; or (f) enabling any other thing to be done which promotes or preserves the national interest in general.

Kukutia Ole Pumbuni and Another v Attorney General and Another (1993) TLR 159:167. http://​www.​jurisafrica.​org/​docs/​ald-mcm/​2-constitutional-dev-inafrica/​2(vi)%20​KUKUTIA+OLE+PUMP​UN+AND+ANOTHER+v​+ATTORNEY+GENERA​L+AND+ANOTHER+19​93+TLR+159.​pdf. Accessed 4 December 2018.

For critical comments, see Boshe 2014, 2016.

Draft Data Protection Bill, s. 5(3)(b).

Draft Data Protection Bill, s. 6(1).

Draft Data Protection Bill, s. 6(2).

Draft Data Protection Bill, s. 9.

Draft Data Protection Bill, s. 10.

Draft Data Protection Bill, s. 13(1).

Electronic and Postal Communications (Consumer Protection) Regulations, 2018, R.6, https://​www.​tcra.​go.​tz/​images/​documents/​regulations/​10_​GN_​61_​_​The_​Electronic_​and_​Postal_​Communications_​Consumer_​Protection_​_​Regulations_​2018.​pdf.

See Section 15(7) of the HIV and AIDS (Prevention and Control) Act, which states, ‘Any health practitioner who compels any person to undergo HIV testing or procures HIV testing to another person without the knowledge of that other person commits an offence’.

The HIV and AIDS (Prevention and Control) Act, s. 17(1).

GDPR, Recital 22.

C-230/14.

GDPR, Recital 23.

Ibid.