REPUBLIC OF ZAMBIA
Office of The Data Protection Commissioner
The Data Protection Act, 2021
(Act No. 3 of 2021)
The Data Protection (General) Regulations, 2024
DPC Registration Portal
Note: Before filling out this application form, consult the registration guide available on:
www.dataprotection.gov.zm/registration
Continue
DPC Registration Portal
SECTION 1 - APPLICANT DETAILS
SECTION 2 - PREVIOUS APPLICATIONS
SECTION 3 - CURRENT APPLICATION
SECTION 4 - DATA STORAGE
Type of Data Service
Data Processor
Data Controller
Data Controller and Data Controller
Type of Applicant
Individual
Entity
Partnership
Full Names
Applicant Business/Service Sector
-- Select --
Hospitality - Food and Beverages
Hospitality - Lodging
Hospitality - Tourism and Travel
Hospitality - Others
Arts, Entertainment and Recreation Activities
Construction
Education
Electricity, Gas, and Air Conditioning Supply
Financial - Banking
Financial - Micro Financing and Money Lending
Financial - Insurance
Financial - Insurance broking and Agency
Financial - Forex
Financial - Asset Management
Social Work Activities, CSOs, NGOs
Manufacturing
Agriculture - Livestock
Agriculture - Crop/Horticulture
Agriculture - Fish Farming
Agriculture - Agronomy
Agriculture - Mixed
Mining and Quarrying
Research/Consultancy, Scientific, and Technical Activities
Public Administration and Defence
Pension and Social Security
Real Estates and Accommodation
Wholesale and Retail Trade, Motor Vehicle Repair and Dealership
Transport and Courier Services
Petroleum and Energy Services
Health and Health Related
Physical Address
Phone Number
Email Address
NRC/Passport Number:
NRC/Passport Upload
Entity - Tick As Appropriate:
Public
Private
NGO
Faith Based Organization
Political Organisation
Development Partner
Quasi Government
Other (describe):
Category of Entity:
Micro Organization
Medium Organization
Large Organization
(Note: check registration guide for categorizations)
Country of Registration:
Afghanistan
Aland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antigua and Barbuda
Argentina
Armenia
Aruba
Australia
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belgium
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire, Sint Eustatius and Saba
Bosnia and Herzegovina
Botswana
Brazil
British Indian Ocean Territory
Brunei
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Canada
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Cook Islands
Costa Rica
Côte d'Ivoire
Croatia
Cuba
Curaçao
Czech Republic
Denmark
Djibouti
Dominica
Dominican Republic
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands
Fiji
Finland
France
French Polynesia
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Haiti
Vatican City
Honduras
Hong Kong
Hungary
Iceland
India
Indonesia
Iran
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Japan
Jersey
Jordan
Kazakhstan
Kenya
Kiribati
North Korea
Kuwait
Kyrgyzstan
Laos
Latvia
Lebanon
Lesotho
Liberia
Libya
Liechtenstein
Lithuania
Luxembourg
Macao
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mexico
Micronesia
Moldova
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Northern Mariana Islands
Norway
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Poland
Portugal
Puerto Rico
Qatar
Romania
Russia
Rwanda
Saint Barthélemy
Saint Kitts and Nevis
Saint Lucia
Saint Martin
Saint Vincent and the Grenadines
Samoa
San Marino
Sao Tome and Principe
Saudi Arabia
Senegal
Serbia
Seychelles
Sierra Leone
Singapore
Sint Maarten
Slovakia
Slovenia
Solomon Islands
Somalia
South Africa
South Korea
South Sudan
Spain
Sri Lanka
Sudan
Suriname
Eswatini
Sweden
Switzerland
Syria
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tokelau
Tonga
Trinidad and Tobago
Tunisia
Turkey
Turkmenistan
Turks and Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United Kingdom
United States
Uruguay
Uzbekistan
Vanuatu
Venezuela
Vietnam
Virgin Islands
Yemen
Zambia
Zimbabwe
Entity Name:
Registration No.:
Upload Copy of Registration Certificate
Entity Business/Service Sector:
-- Select --
Hospitality - Food and Beverages
Hospitality - Lodging
Hospitality - Tourism and Travel
Hospitality - Others
Arts, Entertainment and Recreation Activities
Construction
Education
Electricity, Gas, and Air Conditioning Supply
Financial - Banking
Financial - Micro Financing and Money Lending
Financial - Insurance
Financial - Insurance broking and Agency
Financial - Forex
Financial - Asset Management
Social Work Activities, CSOs, NGOs
Manufacturing
Agriculture - Livestock
Agriculture - Crop/Horticulture
Agriculture - Fish Farming
Agriculture - Agronomy
Agriculture - Mixed
Mining and Quarrying
Research/Consultancy, Scientific, and Technical Activities
Public Administration and Defence
Pension and Social Security
Real Estates and Accommodation
Wholesale and Retail Trade, Motor Vehicle Repair and Dealership
Transport and Courier Services
Petroleum and Energy Services
Health and Health Related
Entity Address:
Phone Number
Email Address
Website
Entity Name:
Phone Number
Address:
Email Address
Website
Has applicant ever applied to provide data controller or data processor services in Zambia?
Yes
No
Service(s) applied for
Data Processor
Data Controller
Brief description of service(s)
Date of application
Status of application
Granted
Rejected
Pending
Give reasons for rejection:
Service commencement date (existing services):
Proposed Service commencement date (new services):
Brief description:
(Of data services being offered)
Has applicant been convicted of an offence involving fraud or dishonesty or of any offence under the Data Protection Act 2021, Electronic Communication and Transaction Act, 2021 or any of their predecessors, Or any other law within Zambia?
Yes
No
Nature of offence
Date of Conviction
Sentence
Where the applicant is a Data Processor, the following details are required:
(If one enter details, if many, enter "Various")
(a) Name of Data Controller:
(b) Is there a Data Processing contractual agreement between the Data Controller and the Applicant
Yes
No
If No, Ensure to enter into Contract with the Data Controller(s)
Where the applicant is a Data Controller, the following database/software application registration details are required:
(a) Name of database and approximate number of personal data records:
Database Name:
Approx. No. of records:
(b) Category of Data Subjects
(c) List of the information to be stored:
What is the information used for?
(d) Are you processing or intend to process sensitive personal data?
Yes
No
(e) Will the information be passed on or shared with other organization(s)/persons within Zambia?
Yes
No
(f) Will the information be transferred outside Zambia?
Yes
No
Note: If yes, You will need to apply for a separate authorization to transfer personal data outside of Zambia
(g) Basis for Processing Personal Data (Tick As Appropriate)
Consent
Contractual obligation
Legal Obligation
Vital interests
Public interest
Legitimate Interest
(h) Identified Risks To Personal Data
(i) Risk mitigation measures in place
(j) Details of Data Processing Activities on the Personal Data
Flowchart or Pseudocode attachment
(k) Is the Applicant a Joint Controller
Yes
No
Provide details of the Joint Controller
(a) Name:
(b) Address:
(c) Attach Data Processing Agreement/MoU:
Details of Appointed Data Protection Officer (DPO)
(a) Type of DPO:
Internal
External
None
(If not appointed yet)
(b) Name/Company Name:
(c) Address:
(d) Email Address:
(e) Mobile No.:
Do you store personal data outside of Zambia?
Yes
No
If YES, you will need to apply for a separate authorization to store personal data outside of Zambia.
QUALITY OF SERVICE UNDERTAKING
I/we declare that the quality of service I/we provide shall meet the minimum requirements set out under the Act or any other law or, guidelines published by the Data Protection Commissioner or any international standard.
Agree
DECLARATION
I/we declare that all the particulars and information provided in this application are complete, correct and true and I/we agree that in the event that any of the said particulars and information provided is found to be untrue or fraudulent, the licence may be revoked.
Agree
I/we agree that in the event of the revocation of the licence, any fee paid to the authority for licence shall be forfeited. I/we declare that in the event that the nature of my/our business changes, or I/we no longer carry out operations in terms of the registration, I/we will notify the Authority in which case my/our registration may be revoked or revised.
Agree
Back
Submit
Please wait...
Next
Submission Review
Entity Summary
Entity Name
...
Registration Number
....
Entity Type
....
Category of Entity
....
Entity Business/Sector
...
Email
...
Phone
...
Website
...
Applicant Summary
Name of Applicant
...
Type of Service
...
Type of Applicant
...
Joint Controller
...
DECLARATION
I/we declare that all the particulars and information provided in this application are complete, correct and true and I/we agree that in the event that any of the said particulars and information provided is found to be untrue or fraudulent, the licence may be revoked.
Agree
Cancel
Submit
Please wait...
DPC Registration Portal
Loading...
