Question 1

What is the Data Protection Act in Botswana?

Accepted Answer

The Data Protection Act (DPA) is Botswana's primary law governing the collection, processing, storage, and sharing of personal data. It establishes data subject rights, obligations for data controllers and processors, and the Office of the Data Protection Commissioner.

Question 2

What are my rights under the Botswana Data Protection Act?

Accepted Answer

Under Botswana's DPA, data subjects have rights including: the right to be informed, right of access, right to rectification, right to erasure, right to restrict processing, right to data portability, and the right to object to processing.

Question 3

How do I report a data breach in Botswana?

Accepted Answer

Data breaches in Botswana must be reported to the Data Protection Commissioner within 72 hours of becoming aware of the breach. Affected data subjects must also be notified without undue delay if the breach poses a risk to their rights and freedoms.

Question 4

Who does the Botswana DPA apply to?

Accepted Answer

The Botswana Data Protection Act applies to any person or entity that collects, processes, or stores personal data in Botswana, as well as entities outside Botswana that process data of data subjects in Botswana.

Question 5

What is the penalty for non-compliance with Botswana's DPA?

Accepted Answer

Non-compliance with Botswana's Data Protection Act can result in fines of up to P500,000 or imprisonment for up to 5 years, depending on the nature and severity of the offence. Reputational damage and business disruption are also significant consequences.