More than half of the SADC countries have adopted data protection laws. This
is a progressive development. It creates an opportunity for development of
regional network of African data protection authorities. At the global level, there
is the Global Privacy Forum that brings together DPAs.79 In Southern Africa,
only South Africa and Mauritius are listed as Global Privacy Forum as
accredited members as of April 2023.80 As some DPAs in Southern Africa have
dual roles like Zimbabwe and Eswatini, who are telecommunications
regulators, they are already members of other networks in the region such as
Communications Regulators Association Southern Africa (CRASA)81, this
could be a platform that can be activated to consider challenges of DPAs and
dual roles. The institutionalisation of a regional network of DPAs could enhance
collaboration, and coordination on transnational issues such as data transfers,
enforcement of data subject rights, data sharing practices and data
intermediaries.82 Critical role of this network includes developing and designing
regional guidelines on data transfers for instance and responding to newer
challenges on data protection. In addition, a more coordinated platform for
sharing lessons and opportunities is necessary, that in future could be the
African or SADC data protection authority, with full regulatory and enforcement
powers.

.Recommendations
6.1 Public engagement and awareness
At a country level, DPAs must engage in public awareness and education.
There are examples of Zimbabwe, South Africa DPAs engaging citizens on
data privacy matters, however this might not be sufficient considering the
capacity constraints faced by these institutions. In partnership with civil society,
consumer interests groups such as consumer associations, the DPAs must
produce public engagement materials and agendas simplified to explain the
many technical aspects of data protection, and the data subject rights.

From their website the Global Privacy Assembly first met in

as the International Conference of Data Protection and Privacy Commissioners.

The Assembly has been the premier global forum for data protection and privacy authorities for more than four decades. The Assembly seeks to
provide leadership at international level in data protection and privacy. It does this by connecting the efforts of more than

data protection and

privacy authorities from across the globe.
https://globalprivacyassembly.org/participation in the assembly/list of accredited members/ accessed April

.

member states of SADC are part of CRASA with the exception of Seychelles, Mauritius and Comoros.
The African Digital Rights Hub has been instrumental in providing a platform for African DPAs to meet during Africa Data Protection Summits. This
needs to be institutionalised within African institutions such as SADC or the African Union.

PAGE

Select target paragraph3