The Act governs access to information, the protection of privacy, and data that is processed or stored at least in part automatically, alongside the Protection of Personal Information Act [Chapter 10:27]. It applies to processing in the context of a controller's activities and to controllers not established in Zimbabwe that use means located in Zimbabwe (other than for mere transit); such controllers must designate a representative established in Zimbabwe.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.