Botswana Data Protection Act (2024)

Botswana

v2024

8 domains

32 controls

The Botswana Data Protection Act provides a comprehensive framework for the protection of personal data in Botswana. It establishes data protection principles, individual rights, obligations for data controllers and processors, and provisions for cross-border data transfers. Creates the Data Protection Commissioner to oversee implementation and enforcement.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Botswana DPA Part I: Preliminary

2 controls

Controls in the Botswana DPA Part I: Preliminary domain of Botswana Data Protection Act (2024) — 2 controls
Code	Title	Description
BW-DPA-s2	Interpretation	Interpretation. Section 2 defines the terms used in the Act (personal data, processing, data controller, data subject, s...
BW-DPA-s3	Application	Application. Section 3 sets out to whom and to what processing the Act applies, including territorial scope and any excl...

Botswana DPA Part II: Information and Data Protection Commission

3 controls

Controls in the Botswana DPA Part II: Information and Data Protection Commission domain of Botswana Data Protection Act (2024) — 3 controls
Code	Title	Description
BW-DPA-s4	Establishment of the Information and Data Protection Commission	Establishment of the Commission. Section 4 continues/establishes the Information and Data Protection Commission as the s...
BW-DPA-s5	Functions and powers of Commission	Functions and powers of the Commission. Section 5 sets out the Commission's functions and powers, including supervision,...
BW-DPA-s7	Powers of the Commissioner	Powers of the Commissioner. Section 7 sets out the powers of the Commissioner in administering the Act.

Botswana DPA Part III: Commission's Specific Powers

3 controls

Controls in the Botswana DPA Part III: Commission's Specific Powers domain of Botswana Data Protection Act (2024) — 3 controls
Code	Title	Description
BW-DPA-s10	Right of access to information by Commissioner	Right of access by the Commissioner. Section 10 empowers the Commissioner to access information held by a data controlle...
BW-DPA-s11	Commission to seek rectification	Commission to seek rectification. Section 11 empowers the Commission to require a data controller to rectify personal da...
BW-DPA-s12	Order to delete personal data	Order to delete personal data. Section 12 empowers the Commission to order the deletion of personal data in defined circ...

Botswana DPA Part IV: Requirements and Criteria for Processing Data

6 controls

Controls in the Botswana DPA Part IV: Requirements and Criteria for Processing Data domain of Botswana Data Protection Act (2024) — 6 controls
Code	Title	Description
BW-DPA-s14	Requirements for processing	Requirements for processing. Section 14 sets out the general requirements that must be met for the lawful processing of...
BW-DPA-s15	Limitation to processing	Limitation to processing. Section 15 limits processing to what is necessary and compatible with the purposes, embodying...
BW-DPA-s16	Criteria for processing	Criteria for processing. Section 16 sets out the lawful criteria (including consent and other permitted grounds) under w...
BW-DPA-s17	Processing for other purposes	Processing for other purposes. Section 17 governs the further processing of personal data for purposes other than those...
BW-DPA-s18	Processing for direct marketing	Processing for direct marketing. Section 18 sets the conditions and data-subject objection rights for processing persona...
BW-DPA-s19	Revocation of consent	Revocation of consent. Section 19 provides the data subject the right to revoke consent and requires controllers to act...

Botswana DPA Part V: Processing of Sensitive Personal Data

3 controls

Controls in the Botswana DPA Part V: Processing of Sensitive Personal Data domain of Botswana Data Protection Act (2024) — 3 controls
Code	Title	Description
BW-DPA-s20	Prohibition for processing of sensitive personal data	Prohibition on sensitive data. Section 20 prohibits the processing of sensitive personal data except where a permitted e...
BW-DPA-s21	Safeguards for processing sensitive personal data	Safeguards for sensitive data. Section 21 requires specific safeguards where sensitive personal data are processed under...
BW-DPA-s25	Processing of genetic and biometric data	Genetic and biometric data. Section 25 imposes specific conditions on the processing of genetic and biometric personal d...

Botswana DPA Part VI: Data Collection, Right to Access and Duties of Data Controllers

7 controls

Controls in the Botswana DPA Part VI: Data Collection, Right to Access and Duties of Data Controllers domain of Botswana Data Protection Act (2024) — 7 controls
Code	Title	Description
BW-DPA-s28	Information for data subject	Information for the data subject. Section 28 requires the controller to provide prescribed information to the data subje...
BW-DPA-s30	Rights of data subject	Rights of the data subject. Section 30 sets out the data subject's rights, including access, rectification, erasure, obj...
BW-DPA-s32	Safeguards for processing of personal data	Safeguards for processing. Section 32 requires controllers to implement appropriate technical and organisational safegua...
BW-DPA-s33	Notification of breach to safeguards	Notification of breach to safeguards. Section 33 requires controllers to address and notify breaches affecting the safeg...
BW-DPA-s34	Obligation to notify Commissioner	Obligation to notify the Commissioner. Section 34 requires controllers to notify the Commissioner of breaches as prescri...
BW-DPA-s36	Data protection representative	Data protection representative. Section 36 requires the appointment of a data protection representative (officer) with d...
BW-DPA-s38	Mandatory notification and registration	Mandatory notification. Section 38 requires data controllers to notify/register their processing with the Commissioner a...

Botswana DPA Part VII: Investigations and Enforcement

4 controls

Controls in the Botswana DPA Part VII: Investigations and Enforcement domain of Botswana Data Protection Act (2024) — 4 controls
Code	Title	Description
BW-DPA-s41	Investigation by Commissioner	Investigation by the Commissioner. Section 41 empowers the Commissioner to investigate compliance with the Act, with whi...
BW-DPA-s42	Complaints	Complaints. Section 42 gives data subjects the right to complain to the Commissioner and sets out how complaints are han...
BW-DPA-s43	Enforcement notice	Enforcement notice. Section 43 empowers the Commissioner to issue enforcement notices requiring a controller to take or...
BW-DPA-s45	Appeals Tribunal	Appeals Tribunal. Section 45 establishes the Appeals Tribunal and the right to appeal decisions of the Commissioner.

Botswana DPA Part VIII: Miscellaneous Provisions

4 controls

Controls in the Botswana DPA Part VIII: Miscellaneous Provisions domain of Botswana Data Protection Act (2024) — 4 controls
Code	Title	Description
BW-DPA-s48	Transborder flow of personal data	Transborder flow. Section 48 governs the transborder flow of personal data, requiring conditions to be met before data l...
BW-DPA-s49	Transfer of personal data to a third country	Transfer to a third country. Section 49 sets the conditions for transferring personal data to a third country, including...
BW-DPA-s51	Offences and penalties	Offences and penalties. Section 51 sets out the offences under the Act and the corresponding penalties (fines and, in de...
BW-DPA-s52	Compensation for damages	Compensation for damages. Section 52 provides a right to compensation for damage suffered as a result of a contravention...

Your Compliance Coverage

If you comply with Botswana Data Protection Act (2024), you already cover:

GDPR

44%

14 controls mapped

Compare →

ISO 10005:2005

1 controls mapped

Compare →

ISO/IEC TR 24028:2020

1 controls mapped

Compare →

+ 1 more: ISO 27002:2022 (3%)

See all 4 mapped frameworks ↓

Maps to 4 other frameworks

32 total controls

GDPR

14 source controls mapped|8 target controls covered

44%

ISO 10005:2005

1 source controls mapped|1 target controls covered

ISO/IEC TR 24028:2020

1 source controls mapped|1 target controls covered

ISO 27002:2022

1 source controls mapped|1 target controls covered

Compare Botswana Data Protection Act (2024) with GDPR

Frequently Asked Questions

What is Botswana Data Protection Act (2024)?

Botswana Data Protection Act (2024) is a compliance framework from Botswana with 8 domains and 32 controls. The Botswana Data Protection Act provides a comprehensive framework for the protection of personal data in Botswana. It establishes data protection principles, individual rights, obligations for data controllers and processors, and provisions for cross-border data transfers. Creates the Data Protection Commissioner to oversee implementation and enforcement. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does Botswana Data Protection Act (2024) have?

Botswana Data Protection Act (2024) has 32 controls organised across 8 domains. The largest domains are Botswana DPA Part VI: Data Collection, Right to Access and Duties of Data Controllers (7 controls), Botswana DPA Part IV: Requirements and Criteria for Processing Data (6 controls), Botswana DPA Part VII: Investigations and Enforcement (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does Botswana Data Protection Act (2024) map to?

Botswana Data Protection Act (2024) maps to 4 other compliance frameworks. The top mapping partners are GDPR (44% coverage), ISO 10005:2005 (3% coverage), ISO/IEC TR 24028:2020 (3% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with Botswana Data Protection Act (2024) compliance?

Start your Botswana Data Protection Act (2024) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Botswana Data Protection Act (2024) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 32 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required