PDPC data protection registration for SACCOS in Tanzania
Tanzania’s data protection registration deadline passed 8 April 2026, with enforcement now active — a general requirement that applies to SACCOS along with every other organization processing personal data.
The requirement
Tanzania's Personal Data Protection Act requires organizations that collect or process personal data to register as a data controller or data processor with the Personal Data Protection Commission (PDPC). The final registration deadline was 8 April 2026; PDPC enforcement — audits and penalties for organizations that didn't register — began the following day.
Reporting around the deadline put the number of registered institutions at over 14,000, though the precise figure is not independently confirmed to any greater precision than that.
No SACCOS-specific carve-out — this is a general requirement
The registration requirement applies to organizations generally, public and private, that collect or process personal data — it isn't written as a SACCOS-specific or even financial-sector-specific rule. A SACCOS is swept in the same way any organization handling member records, loan applications, or KYC documentation would be: by the nature of what it processes, not by a rule naming SACCOS directly.
Kujisajili PDPC — nini kinahitajika
Kila taasisi inayokusanya au kuchakata taarifa binafsi za watu — ikiwa ni pamoja na SACCOS — inatakiwa kujisajili na Tume ya Ulinzi wa Taarifa Binafsi (PDPC). Muda wa mwisho wa usajili ulikuwa 8 Aprili 2026, na ukaguzi ulianza siku iliyofuata.
What to do if your SACCOS hasn't registered
Registration and enforcement status can change quickly once a compliance deadline has passed — check PDPC's own current guidance directly rather than treating any single article (including this one) as the final word on where enforcement currently stands.