Eswatini Data Protection Authority: Compliance Deadline for Eswatini Data Protection Act

• The Eswatini Data Protection Act came into force in March 2022, designating the EDPA as the authority responsible for enforcing compliance.
• January 22-28 is declared National Data Protection Week to raise awareness about data protection and promote best practices.
• Entities must ensure they keep customers' data protected and in accordance with the data protection principles and applicable legal frameworks.

A data breach can lead to a loss of reputation and customer trust, as well as potential financial sanctions imposed by the EDPA.

The Eswatini Data Protection Act came into force in March 2022, marking a significant milestone in the country's efforts to protect personal data. The Act designates the Eswatini Communications Commission as the Eswatini Data Protection Authority (EDPA), responsible for enforcing compliance with the Act. As part of its mandate, the EDPA has declared January 22-28 as National Data Protection Week, a period dedicated to raising awareness about the importance of data protection and promoting best practices in processing personal information.

The EDPA's efforts are aimed at educating both individuals and entities on their roles in protecting personal data. For individuals, it is essential to be informed and calculated when sharing personal data, especially with entities that may use it for unintended purposes. On the other hand, entities must ensure they keep customers' data protected and in accordance with the data protection principles and applicable legal frameworks.

A data breach can lead to a loss of reputation and customer trust, as well as potential financial sanctions imposed by the EDPA.

The Eswatini Data Protection Act is built on the foundation of the Right to Privacy enshrined in the Eswatini Constitution, 2005. The Act's object is to balance competing values of personal information privacy and sector-specific laws, while also providing for the collection, processing, disclosure, and protection of personal data. This framework is in line with international standards, as reflected in the Council of Europe's 'Convention 108' on the protection of personal information, which was signed in 1981.

The EDPA's role in enforcing compliance with the Act is critical in ensuring that entities respect individuals' right to privacy and adhere to data protection principles. The EDPA's efforts are also aligned with global initiatives, such as Data Protection Day, celebrated annually on January 28.

The Eswatini Data Protection Act compliance deadline is a critical milestone for entities operating in the country. Failure to protect customers' data in accordance with the Act can result in reputational damage, loss of customer trust, and financial sanctions. Entities must prioritize transparency in their data collection, use, and sharing practices to create trust with their customers.

The EDPA's National Data Protection Week is an opportunity for entities to review their data protection policies and procedures, ensuring they are compliant with the Act. By doing so, entities can avoid potential risks associated with non-compliance and maintain a positive reputation in the market.

Lawyers and compliance officers should be aware of the potential for reputational damage, loss of customer trust, and financial sanctions if entities fail to protect customers' data in accordance with the Eswatini Data Protection Act. It is essential to ensure transparency in data collection, use, and sharing practices.

Source: Original reporting via Eswatini Communications Commission