Zimbabwe passenger data record
- Data protection authority
- Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), section 5 1
- Agency that receives API/PNR
- Not published 7
- API/PNR status
- Not confirmed. Zimbabwe was not listed among African states with API in force on 18 July 2024 7
- Biometric collection at entry
- Not confirmed in official records. E-gates with fingerprint and iris checks reported in May 2024 6
The Cyber and Data Protection Act
POTRAZ lists the law as the Cyber and Data Protection Act 5 of 2021, Chapter 12:07 2. Section 5 designates POTRAZ as the Data Protection Authority, and section 6 sets its functions, which include regulating processing, investigating complaints and advising the Minister 1. POTRAZ publishes the Cyber and Data Protection Regulations, SI 155 of 2024, and guidelines on licensing of data controllers (2025) and cross-border transfer 2. Complaints go through the POTRAZ data protection pages 3.
Section 7(1)(c) says data must be kept in identifiable form for no longer than necessary for its purpose 1. Section 12 requires written consent to process genetic, biometric and health data, subject to listed exceptions 1. Section 20 requires notice to the Authority before automated processing 1.
Cross-border transfer rules
Section 28(1) says a data controller may transfer personal information to a third party in a foreign country only where adequate protection is ensured there 1. Section 29 lists exceptions, including unambiguous consent of the data subject, performance of a contract and important public interest grounds 1. The Act does not define biometric data 1.
E-visa and the Online Border Management System
The Department of Immigration operates the e-visa portal at evisa.gov.zw, where travellers start and track visa applications 4. The portal links to a privacy policy and terms but does not state on its main page how data is handled 4.
As reported by Mashudu Netsianda in The Herald on 19 July 2023, Information Minister Monica Mutsvangwa said after a Cabinet meeting that Cabinet considered and approved the engagement of Garsu Pasaulis AUB 5. Home Affairs Minister Kazembe Kazembe proposed it 5. The report says the existing Garsu Pasaulis contract for e-passports was extended to cover national biometric infrastructure for entry visas and residence permits 5.
As reported by Tanyaradzwa Rusike in The Sunday Mail on 19 May 2024, the OBMS was set to be piloted at Robert Gabriel Mugabe International Airport, Victoria Falls International Airport and Beitbridge Border Post 6. The paper reported that travellers would complete an electronic arrival form before travel in place of the paper IF1 form 6. It said e-gates would scan the passport chip and compare fingerprints and iris data against the immigration database 6. Chief Director of Immigration Respect Gono was quoted 6.
Contract terms and what is not published
Press reports of the July 2023 Cabinet decision describe the e-passport arrangement with Garsu Pasaulis in two ways, and neither states the model for the visa and permit extension 5,8. The Herald report by Mashudu Netsianda calls it build, operate and transfer 5. The Herald report by Wallace Ruzvidzo calls it build, own, operate and transfer 8.
No contract value, term, hosting location or data ownership clause for the OBMS was found in official or named-reporter sources checked 5,6 8. No audit office, parliamentary or POTRAZ finding on the OBMS was found as of 21 October 2026.
| Date | Event |
|---|---|
| July 2023 | Cabinet approves Garsu Pasaulis AUB for online visa and permit system, as reported 5,8 |
| 19 May 2024 | OBMS e-gates with biometric checks reported as planned 6 |
| 18 July 2024 | ICAO slides omit Zimbabwe from states with API in force 7 |
| 28 to 30 January 2025 | POTRAZ holds Second Data Privacy Symposium in Victoria Falls 3 |
Common questions
Does Zimbabwe collect API or PNR data?
Not confirmed. No official record of a live API or PNR programme was found, and ICAO did not list Zimbabwe with API in force in July 2024 7.
Who is Zimbabwe's data protection authority?
POTRAZ, designated by section 5 of the Cyber and Data Protection Act 1.
Who built Zimbabwe's online border system?
As reported by The Herald, Cabinet approved Garsu Pasaulis AUB in July 2023 5.
Where do I apply for a Zimbabwe e-visa?
On the Department of Immigration portal at evisa.gov.zw 4.
Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email [email protected] with the official link.
Sources
- ZimLII: Cyber and Data Protection Act [Chapter 12:07] (version of 11 March 2022)
- POTRAZ: Cyber and Data Protection Act and implementation guidelines (modified 12 March 2026)
- POTRAZ: home page, Data Protection Authority links (checked 21 October 2026)
- Department of Immigration: Zimbabwe e-visa portal (checked 21 October 2026)
- The Herald, Mashudu Netsianda: Government introduces online system for visas (19 July 2023)
- The Sunday Mail, Tanyaradzwa Rusike: Zim rolls out unmanned borders (19 May 2024)
- ICAO ESAF: AFI Aviation Week Symposium, AVSEC and FAL session slides (18 July 2024)
- The Herald, Wallace Ruzvidzo: Second Republic deepens modernisation thrust (20 July 2023)
Related
- E-visa and electronic travel authorisation data
What US ESTA, UK ETA, Canada eTA, Kenya ETA, EU ETIAS and India e-Visa collect from travellers, and how long the data is kept.
- Facial recognition gates at airports
How border e-gates match a traveller's face to a passport or a stored gallery, what images are kept, who runs the gates and where they are used.
- Biometric data at borders
Which fingerprints and facial images border agencies collect from travellers, the legal basis, who holds the records and how long they are kept.
- Passenger data clauses in border contracts
The terms that decide who holds passenger data in border systems: data location, fees, funding, gateway providers and what official records publish.
- Who oversees passenger data
The bodies that check how governments use API and PNR data: data protection authorities, data protection officers, courts and UN standards.