Techvest 
Zimbabwe’s Cyber and Data Protection Act and SI 155 of 2024 require any business that processes the personal data of 50 or more people — customers, staff, members, learners, patients — to hold a POTRAZ licence, appoint a Data Protection Officer, and report breaches within 24 hours. Most businesses haven’t started. We partner with certified DPOs to work out what you need, handle the paperwork with POTRAZ, and check your data regularly so you’re ready if you’re ever hacked.
- Find out if — and how — the law applies to you
- POTRAZ licence application, handled
- A certified DPO through our partners
- Periodic data checks & a breach plan
Does the law apply to you — and what happens if you're hacked?
Roughly how many people’s details does your business keep?
Count everyone whose name, phone number, ID or address you store: customers, staff, members, learners, patients. Contacts in WhatsApp and names in spreadsheets count too.
Now imagine a staff phone gets hacked and customer chats leak.
Based on the Cyber and Data Protection Act [Chapter 12:07] and SI 155 of 2024. General information, not legal advice.
Everything that comes with it.
A clear assessment
Plain-language findings: what personal data you hold, where it is, who can see it, and which licence tier you fall into.
POTRAZ licence, handled
We prepare and submit your data controller licence application and follow it through to approval and yearly renewal.
A certified DPO
Through our partners, a POTRAZ-certified Data Protection Officer is appointed for your business — no full-time hire needed.
Policies that fit
Privacy notice, consent wording, retention and access rules written for how your business actually works, not copied from a template.
Periodic data checks
Regular reviews of who can access what, old data that should be deleted, and new systems or staff that need covering.
Breach response plan
A 24-hour playbook: who does what, the POTRAZ breach form, and how to tell affected customers within 72 hours.
From “are we compliant?” to covered.
Assess
We map what personal data you hold and where it lives — phones, WhatsApp, spreadsheets, systems — and confirm your licence tier.
Register
We prepare your POTRAZ licence application and follow it through to approval, then remind you well before each yearly renewal.
Appoint
A certified Data Protection Officer from our partner network takes on the role, and we notify the Authority.
Check
Scheduled data checks keep you compliant as you grow, with a 24-hour breach plan ready if something goes wrong.
Good questions, straight answers.
Does the law apply to my small business?
If you process the personal information of 50 or more people — customers, staff, members — SI 155 of 2024 requires a POTRAZ data controller licence. Tier 1 covers 50 to 1,000 people. Only narrow cases such as personal or household use are exempt.
What are the licence tiers and fees?
Tier 1: 50–1,000 people, US$50 a year. Tier 2: 1,001–100,000, US$300. Tier 3: 100,001–500,000, US$500. Tier 4: over 500,000, US$2,500. Tiers 2–4 also pay a US$30 application fee. POTRAZ sets the fees and can change them.
Do I have to hire a full-time Data Protection Officer?
Every licensed business must appoint a DPO and notify POTRAZ. Many don’t need a full-time hire: we partner with certified DPOs who can take on the role for you.
What happens if we get hacked?
You must report the breach to POTRAZ within 24 hours, and tell affected people within 72 hours if they’re at high risk. A business that is licensed, with a DPO and a plan, can do that quickly and show it took reasonable care. Processing personal data without a licence is an offence in itself — a fine up to level 11, up to seven years’ imprisonment, or both — so a breach is the worst time to find out you’re not registered.
Are you a law firm?
No. We’re a technology company that partners with certified Data Protection Officers. Where you need a legal opinion on your specific situation, we’ll point you to qualified legal counsel.
Our other services
Web Design & Development
Fast, beautiful, search-ready websites — designed by senior hands and accelerated by AI, which is why our timelines and quotes surprise people.
Learn more → Service 02Custom Software & AI Systems
Platforms, portals and dashboards with intelligence built in — AI assistants, document understanding, smart search and automation shaped around how your business actually runs.
Learn more → Service 03AI Chatbots & WhatsApp Automation
Conversational AI agents that answer like your best employee — on WhatsApp and the web. They take orders, book appointments and send receipts while you sleep.
Learn more →Ready to talk potraz-ready, without the headache?
A website, a system, an AI assistant — or just an idea that won't leave you alone. Send us a message and we'll talk it through with you. No charge, no obligation.