Use of CCTV without registration illegal, says Data Protection Commission

Arusha. The Personal Data Protection Commission (PDPC) has warned that it is unlawful for individuals or institutions to operate security cameras without registering with the commission.

The warning was issued on March 24, 2026 by the commission’s Head of Public Relations and Communications, Innocent Mungy, during a public education stakeholders’ meeting coordinated by the Tanzania Broadcasting Corporation (TBC) in Arusha.

Mr Mungy said closed-circuit television (CCTV) cameras collect personal data.

He noted that the law requires users to clearly inform the public when surveillance cameras are installed in a particular area. He said such disclosure is necessary to safeguard the privacy of individuals.

He further explained that CCTV cameras must be directed only within the premises owned by the user.

He cautioned that pointing cameras towards neighbouring properties or public areas without proper authorisation may violate legal provisions and infringe on privacy rights.

According to the commission, any person or institution that fails to comply with the requirements risks facing legal action.

This may include fines, payment of compensation to affected individuals, or criminal prosecution depending on the nature of the offence.

Mr Mungy also stated that the law governing personal data protection will officially come into force on April 8 this year.

He urged all institutions that collect personal information to complete registration with the commission before the deadline.

The directive forms part of broader efforts to strengthen protection of personal data and ensure responsible handling of information in an era of expanding digital and surveillance technologies.

Stakeholders attending the meeting were reminded of their responsibility to raise public awareness about lawful data collection practices.

The commission emphasised that compliance with registration requirements will enhance accountability and promote trust among citizens whose personal information is increasingly being processed across various sectors.