Which institutions are approved by POTRAZ for DPO training in Zimbabwe?
Short answer
Only institutions approved by POTRAZ may deliver the Data Protection Officer certification required by SI 155 of 2024. The Harare Institute of Technology (HIT) was the first accredited provider, and POTRAZ has been accrediting further institutions. A general privacy course or a foreign GDPR certificate does not satisfy the requirement.
What the law says
SI 155 requires a "certification course approved by the Authority". Section 6 of the Act gives POTRAZ its regulatory functions, and POTRAZ's 2025 DPO Guidelines set out the training and certification framework under which institutions are accredited. Staff awareness training and management briefings are not subject to approval; only the DPO certification is.
Example
A Bulawayo manufacturer is offered a "certified DPO course" by a private training company at a discount. Before paying, the finance director asks for the POTRAZ accreditation letter for the DPO certification course specifically. The company produces a generic training-provider registration and nothing from POTRAZ. The manufacturer declines and enrols its candidate with an accredited institution; the discount would have bought a certificate POTRAZ does not recognise.
In practice
Before paying any provider, including Business Science Institute, ask for evidence of POTRAZ approval for the DPO certification course and check the current list with POTRAZ's Data Protection Authority unit. Use non-accredited providers freely for staff awareness, management briefings and CPD updates, where no approval is required.
General information, not legal advice. This page covers Zimbabwean law only: the Cyber and Data Protection Act [Chapter 12:07], Statutory Instrument 155 of 2024 and POTRAZ’s 2025 Implementation Guidelines. It is not the EU GDPR and not South Africa’s POPIA. Fees, fine levels and deadlines are as gazetted and published by POTRAZ at 9 September 2026; check the latest POTRAZ notices before acting. Businesses named in examples are fictional.