Tanzania's Personal Data Protection Act, 2022 introduced comprehensive data protection obligations for organisations that collect and process personal data, overseen by the Personal Data Protection Commission. Compliance is now a board-level concern — and a fast-moving one. Leyrand advises businesses on meeting these obligations and on protecting the intellectual property that gives them their edge.
Data protection compliance. We conduct data privacy audits, draft privacy policies and data processing agreements, advise on registration and engagement with the Personal Data Protection Commission, and help organisations build the governance and breach-response frameworks the Act requires. We also advise on cross-border data transfers and the data protection dimensions of new technologies, including the use of AI tools.
Intellectual property. We protect the assets that distinguish our clients — advising on the registration, licensing, and enforcement of trademarks and copyright, and on the IP terms within commercial and technology agreements.
Technology and commercial agreements. We advise on the data protection and IP provisions in technology, licensing, and outsourcing contracts, allocating responsibility and risk clearly between the parties.
TODO (firm review): confirm PDPA references and registration guidance with the firm before deep publication, given the regulatory framework is still developing.