POTRAZ Dismisses Claims of a Standalone Cyber Crimes Act in Zimbabwe

‘Zimbabwe does not have a Standalone Cyber Crimes Act’: POTRAZ Clarifies

The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) has dismissed claims suggesting Zimbabwe has enacted a standalone “Cyber Crimes Act.”

POTRAZ described the reports as false and misleading.

Also Read: Cyberbullying in Zimbabwe Could Land You in Prison for 10 Years—Here’s What You Need to Know

Cybercrime Covered Under Criminal Code

In a statement, the POTRAZ said the country does not have an independent law dedicated solely to cybercrime, warning that such assertions risk confusing the public and undermining understanding of the legal framework.

“POTRAZ, as the designated Data Protection Authority, has noted with concern social media posts and online articles claiming that a ‘Cyber Crimes Act’ has been enacted in Zimbabwe. This information is false and misleading. Zimbabwe does not have a standalone ‘Cyber Crimes Act’,” POTRAZ stated.

POTRAZ explained that cyber-related offences in Zimbabwe are addressed under the Criminal Law (Codification and Reform) Act [Chapter 9:23], commonly known as the Criminal Code. The authority said this law remains the principal instrument governing cybercrime in the country.

According to the regulator, the Criminal Code was strengthened in 2021 through amendments introduced by the Cyber and Data Protection Act [Chapter 12:07], which modernised provisions to reflect technological advancements and emerging digital threats.

Wide Range of Online Offences Criminalised

The updated legal framework covers numerous cyber-related offences, including hacking, unlawful access to data, interference with computer systems, and the misuse or disclosure of data codes. It also criminalises the use of specialised devices or tools intended to facilitate cyber offences.

POTRAZ said the law further addresses harmful online conduct such as cyberbullying, harassment, threatening messages, the spread of false data intended to cause harm, and messages that incite violence or property damage.

Protection Against Abuse and Exploitation Online

The authority noted that the legislation also extends to serious social harms committed through digital platforms. These include the non-consensual sharing of intimate images, unlawful recording of private body parts, spam, and the dissemination of racist or xenophobic material.

Child protection provisions are also embedded in the framework, covering offences such as child sexual abuse material and exposing minors to pornographic content via computer and information systems.

Penalties and International Alignment

POTRAZ said penalties for cyber-related offences vary depending on severity, ranging from fines to prison sentences of up to 10 years. Financial cybercrimes, including unauthorised use of bank cards, passwords or PINs, are also prosecutable under the same law.

The regulator added that Zimbabwe’s cybercrime provisions are aligned with international standards, noting that the country is a signatory to the United Nations Convention Against Cybercrime (2024).