Page 105 - SAMENA Trends - February 2022

REGULATORY & POLICY UPDATES SAMENA TRENDS

networks such as Wifi at home or at work. effect on 3 April 2023 when all residential fixed voice
(February 10, 2022) reuters.com and broadband subscribers will be able to use the One
Touch Switch process to move provider, regardless of
Telecommunications watchdog Ofcom has published who their existing provider is, or the technology used
a statement confirming its final decision related to the by that provider. Meanwhile, Ofcom has also confirmed
implementation of the ‘One Touch Switch’ process, that it is making changes to its rules to implement
which is designed to facilitate easier switching between a decision that mobile customers using the Auto-
providers for fixed voice and broadband customers. Switch process will, in the future, receive additional
Having begun consulting on proposals for the process information when they switch. This will include any
back in February 2021, initial decisions were published bundled services and specific services for disabled
by Ofcom the following September, and it has now customers. In a press release regarding the matter,
published its final decision relating to the changes to Ofcom noted: ‘Difficulties in the switching process can
the General Conditions (GCs) – the regulatory rules put people off moving providers. Effective switching is
that all UK communications providers must follow also important to support competitive investment in,
in order to offer services. In short, the watchdog has and take-up of, faster and more reliable broadband.’
confirmed that the revisions to the GCs will come into (February 4, 2022) commsupdate.com

The Postal and Telecommunications Regulatory individual including customers, potential clients or
Authority of Zimbabwe (Potraz) has said anyone members of the public and club or association
keeping personal information for more than 30 people members (in the case of voluntary organizations), is a
must notify it and employ a data protection officer. Data Controller. “Any legal obligations imposed by the
Potraz gave the deadline for notifying it and submitting Data Protection Act and other laws including
Zimbabwe details of the data protection officer. The notice dated employment law, in processing personal data, on any
13 February on data protection follows the enactment person or entity automatically makes that person,
of the Data Protection Act in December last year, entity or organization, a data controller, responsible for
legislation which is meant to build confidence and trust that process, even where it is outsourced,” he said. The
in the secure use of information and communication regulatory authority must also be provided with full
technologies by data controllers, their representatives details of the Data Controller’s legal persona status if
and data subjects. Potraz Director General Dr. Gift they are not an individual, their physical address and
Kallisto Machengete said all data protection officers proof of residence in the form of a telephone, rates or
should have at least an Advanced Level qualification. electricity bill. The Potraz Director General said all Data
“The Postal and Telecommunications Regulatory Controllers and Processors must comply when called
Authority in its capacity as the Data Protection upon to do so in compliance with the requirements of
Authority hereby notifies all Data Controllers and or the Data Protection Act and any existing Data protection
Processors who hold or process personal information legislation, including that relating to employment, anti-
for individuals and have in their possession personal money laundering, record keeping of data subjects
information belonging to more than thirty (30) people rights and record keeping of processing activities.
that they are required to notify the Authority that they Potraz must also be notified of any data breaches and
hold or process data for more than 30 individuals, if information is released without the owner’s consent,
indicate the purpose for which the data is collected and a complaint must be lodged with the regulatory
processed,” said Dr. Machengete. The new law also authority. “Data Protection officers are required to
requires data controllers to comply with the authority’s notify the Authority of any data breaches in terms of
requirements regardless of whether their operations the Act, using the email address dataprotection@
are physical or online. Dr. Machengete said controllers potraz.gov.zw. The Authority hereby advises members
can be companies or individuals. “Any entity or body of the public, that any persons whose personal
established in its own right including, a sole trader information is processed or disclosed to third parties
business, company, charity, club, association or public without their consent should register a complaint on
institution that processes personal data for any living the Authority’s website. (February 21, 2022) chronicle.co.zw

105 FEBRUARY 2022