CONTENTS 1 2 Executive Summary Methodology & Limitations PAGE 2 3 Contextual Introduction PAGE 3 PAGE 3 4 Issues Old and New 4.1 Unending Debate on Independence of Data Protection Authorities........................ PAGE 5 4.2 Protecting sensitive personal data: COVID-19..................................................................... PAGE 9 4.2.1 COVID Surveillance Infrastructure case of Zimbabwe.................................................. PAGE 10 4.2.2 COVID-19 data storage and destruction case of South Africa...................................PAGE 12 4.3 Automated data processing...........................................................................................................PAGE 13 4.4 Breach notification or data leaks or security compromises...........................................PAGE 15 4.5 Lawful transfer of data across borders....................................................................................PAGE 18 4.5.1 Comparative data transfers provisions in SADC member states.............................PAGE 19 4.5.2 Designation of countries for cross border data transfers: Case of Botswana....PAGE 21 4.6 Digital identification systems (DIS)...........................................................................................PAGE 23 5 6 Concluding Observations PAGE 25 Recommendations PAGE 28