By Jonathan Mbiriyamveka
In a significant step towards strengthening regional cooperation in data protection, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) and South Africa’s Information Regulator (IR) signed a Memorandum of Understanding (MoU) at POTRAZ Headquarters in Harare on Monday.
The agreement, hailed as a milestone for Southern Africa’s digital governance landscape, seeks to enhance the secure exchange of personal data between the two countries, promote regulatory alignment, and build trust in the digital economy.
Speaking at the signing ceremony, POTRAZ Director General Dr. Gift Machengete highlighted both the strategic need and long-term benefits of the agreement, especially in the context of deepening regional ties.
“With up to 20,000 people crossing our shared border daily and annual remittances surpassing USD 800 million, the volume of personal data exchanged between Zimbabwe and South Africa is enormous,” said Dr. Machengete.
“This MoU is our joint response to the urgent need for secure, efficient, and rights-respecting data flows.”
Why This MoU Matters
According to Dr. Machengete, the MoU is more than a formal agreement—it is a forward-looking framework designed to support:
Stronger regulatory capacity in managing data privacy.
Harmonised safeguards for cross-border data flows.
Improved business efficiency through consistent data protection standards.
Public trust in the digital economy, built on principles of transparency and accountability.
With both countries playing key roles in the region’s digital and economic integration, the MoU is expected to benefit not just governments and businesses, but also everyday citizens whose personal information is increasingly exchanged across borders.
What the Deal Includes
The agreement sets out a plan for deep cooperation, including:
Exchange of enforcement models and benchmarking
Joint training and personnel exchanges
Coordination on cross-border data protection cases
Development of shared policies and guidance
Annual review meetings to assess progress and set goals
Dr. Machengete credited South Africa’s Information Regulator for their openness and mentorship since Zimbabwe launched its own Data Protection Unit in 2023. “Your support helped shape our early direction. This MoU formalises the spirit of collaboration that has defined our relationship,” he said.
The signing follows directives from ICT ministers issued in March 2025, calling for greater regional coordination in data governance, and builds on the 2012 SADC Model Law on Data Protection.
“This MoU is a direct answer to that call,” said Dr. Machengete. “In an era where data is as powerful as any natural resource, we must protect it—not just technically, but ethically and legally.”
Dr Machengete emphasized that data protection is no longer a niche issue—it is central to economic growth, public trust, and digital sovereignty, especially under initiatives like the African Continental Free Trade Area (AfCFTA).
He concluded with a powerful reminder of the urgency of the moment:
“As John F. Kennedy once asked: If not us, who? If not now, when? Together with our South African counterparts, we have chosen to act—now.”

From left: South Africa Information Regulator, Mr Mosalanyane Mosala and extreme right POTRAZ Director General Dr. Gift Machengete.
