were impacted' despite the request for more details from the IR, the company
was not cooperating, and another request for further particulars confirmed
through a statement of 25 March 2022,
•
•
•

Detailed description of the possible consequences of the security
compromise and its impact on data subjects
Advice and recommendations on the measures to be taken by the data
subjects to mitigate the potential adverse effects of the security
compromise.
Description of the measures that TransUnion intends to take or has taken to
address the security compromise".54

In addition to the above, the IR requested confirmation of a criminal report
having been filed in terms of the Cybercrimes Act, Act No. 19 of 2020. The IR
must be commended for taking a public stance on these matters, however there
was no further disclosure of how the matter was resolved. The IR issued two
statements or demands to TransUnion for specific action. Given the volumes,
the 2022-2023 financial year the IR received eight-hundred and ninety-five
(895) complaints and resolved six-hundred and sixteen (616) were resolved.
This shows the importance of guidelines for the DPA on handling of complaints
especially on breach notifications, and assessments guidelines.55
In Zimbabwe, every general election56 period there are allegations of abuse of
personal data through the sending of unsolicited campaign messages or the
authorised disclosure of voter rolls in public domain. In 2018, the ruling party
sent campaign messages to cell phone subscribers on Econet Wireless
network, prompting citizens action and threats to take legal action against
Econet and the Zimbabwe Electoral Commission (ZEC). The messages were
personalised to the receiver, and therefore not bulk messages but direct and
personalised campaigning. The messages was written in Shona translating to
Cde redacted , I am seeking your support vote to be President, Cde Mashavave for MP
on elections to be held on
July , ZANU PF values peace and progress 57
The Regulator is dissatisfied with TransUnions response, and it initiates an assessment on the security compromise. Media Statement Information
Regulator, March

.

Information Regulator shares outcomes of complaints investigated, and assessments conducted in relation to PAIA and POPOA Media Statement
Information Regulator April
Zimbabwe holds harmonised elections, which are presidency, parliament house of assembly and senate , and local council councillors .
ZANU PF Sending Personalised Messages To Individuals, Where Did They Get That Database? Electoral Commission And Econet Says Not From
Them https://www.techzim.co.zw/

/ /econet denies selling customers data to rd parties refutes zecs allegations so who sold data to

zanu pf/ accessed April

PAGE

Select target paragraph3