Zimbabwe recently promulgated its Data Protection Act in the hope of regulating the collection, storage, and use of personal data. A new article advocates that all business enterprises should have data protection policies over and above what is required under national law. Data protection or lack thereof will increasingly become a risk factor to all business models; therefore, it is suggested internal data protection policies are critical as a self-regulatory tool. What are 7 considerations to know and rely upon in crafting a data protection policy?
