Eswatini Data Protection Authority

“Whose data is it anyway?”

Eswatini Data Protection Awareness week 2025

As a major stakeholder, you have a huge role to play towards making this campaign successful. That is why you will be provided with the necessary resources that you can use to support the campaign. The EDPA has prepared a toolkit that has information about the campaign and how different stakeholders can get involved.

Data Protection Toolkit

EDPA Official Statement

Data Protection Annual Report Checklist

Empower your organization to achieve compliance!

Download Checklist

Become A Data Protection Champion!

Eswatini Data Protection Awareness Week 2025

28 January is observed as the International Data Protection Day. The Commission, in the exercise of its functions as the Eswatini Data Protection Authority (EDPA), will join the world in commemorating this day.

Data Processor

Registering as a Data Processor is a pivotal step toward compliance with the Data Protection Act, 2022. “Data processor” refers to a natural or legal person, or public body which processes personal information for and on behalf of a data controller and under the instructions of a data controller and excludes persons who are authorised to process data under the direct authority of a data controller

Report A Data Breach

Under the Data Protection Act, all data controllers are required to report the personal Data Breaches with the EDPA within 72 hours of the business becoming aware of the breach

Who We Are

The Eswatini Data Protection Authority (EDPA) is charged with the mandate to administer and foster compliance under the Data Protection Act, 2022. The Act designates the Eswatini Communications Commission as the National Data Protection Authority (EDPA) to regulate how personal information is handled, investigate breaches in the handling of information, and resolve any complaints relating to data breaches. (Learn More)

DOWNLOAD ACT

Data Protection Annual Report Checklist

The Data Protection Annual Report Checklist is a comprehensive tool designed to assist organizations in Eswatini in preparing and submitting their annual data protection compliance reports. This checklist outlines the essential requirements and best practices for reporting on data processing activities, security measures, and compliance with the Data Protection Act. By utilizing this resource, entities can ensure they meet statutory obligations and uphold the highest standards of data privacy. We encourage all organizations to download the checklist, complete their annual reports, and submit them to the Eswatini Data Protection Authority (EDPA) for review. (Learn More)

DOWNLOAD CHECKLIST

Empower your organization to achieve compliance and contribute to a culture of data protection in Eswatini.

File A Complaint

→

To address a concern, file a complaint against an organization regarding data-related issues.

Report A data Breach

The Data Protection Act mandates data controllers to report personal data breaches within 72 hours of business awareness.

→

Registering as a Data Controller is crucial for compliance with the Data Protection Act, 2022.

→

Data Protection Principles

The processing of personal data should be lawful and fair, transparent to individuals about its collection, use, consultation, and extent.

→

Data Protection Rights

Understand your data protection rights, which include the right to have your personal information protected.

→

Campaigns

Join us in celebrating the National Data Protection Week 2025 !

→

Publications

Stay up to date with urgent notices

→

We invite the public to join us this National Data Protection Week through our social media platforms, radio, TV and print media as we raise awareness, promote data protection best practices, and discuss important privacy-related topics to remind organizations and individuals why they should care about data privacy.

Mvilawemphi Dlamini

ESCCOM Chief Executive

As the EDPA we recognise the week of 22-28 January as the National Data Protection Week, during which we urge entities (data controllers and data processors) and other actors to organise activities to raise awareness about the importance of data protection and to promote best practices with regards to processing personal information

Mvilawemphi Dlamini

ESCCOM Chief Executive

Entities who in terms of the Act are data controllers and data processors on the other hand need to make sure that they keep their customers’ data always protected and in accordance with the data protection principles and other applicable legal frameworks on data protection. Risk should always be managed, and to create trust, the entities should be transparent on how they are collecting, using, and sharing personal dat

Mvilawemphi Dlamini

ESCCOM Chief Executive

The Data Protection Act refers to the Commission in a rather different way from what you have known the Commission to be, it expands its mandate and designates the Commission as the Eswatini Data Protection Authority responsible for administrating the Act and ensuring compliance, but mostly to ensure that personal information is processed lawfully, and the rights of data subjects are protected.

Mvilawemphi Dlamini

ESCCOM Chief Executive