The Government has issued a firm and final warning to all public and private institutions handling personal data, giving them one last chance to comply with the law.

The directive was delivered on 8 January 2026 by Hon. Angella Jasmine Mbelwa Kairuki, Minister of Communication and Information Technology, who announced a three-month grace period for institutions that have not yet registered with the Personal Data Protection Commission (PDPC).

Speaking during a closing ceremony of a special trainimg to Data Protection Officers which took place in Arusha from 6th to 8th January 2026, The Minister said the extension, which takes effect immediately, is meant to give institutions that collect or process personal data a final opportunity to put their houses in order and register voluntarily, without facing legal action. She emphasized that the move aligns with the Personal Data Protection Act, Chapter 44, and its Regulations, but warned that the window for compliance will not be reopened again.

In a strong directive, Hon. Kairuki instructed the PDPC to begin preparations immediately for compliance audits across the country. These audits will focus on institutions, companies, and individuals involved in collecting, storing, or processing personal data.

She made it clear that any entity found operating without registration, or acting outside the requirements of the law, will face legal consequences as provided under the Act.

The Minister was unequivocal in her warning: “once the three-month period expires, the law will be enforced fully and without exception. No exemptions will be granted, and enforcement actions will be taken against all offenders.” Said Hon. Kairuki.

“This is a Government directive,” the Minister stressed, noting that the measures are part of a broader commitment to protecting citizens’ constitutional rights, especially the right to privacy, as Tanzania continues to grow its digital economy.

With the countdown now underway, public and private institutions have been put on clear notice: register with the PDPC within the next three months, or face the full force of the law.