AI governance in Zimbabwe

AI Governance for Africa > Part 2 > Section 7

In the final part of our assessment on the state of AI governance in Southern Africa, this section reviews the situation in Zimbabwe.

---

The extent of Zimbabwe’s AI use is unknown and there are regulatory gaps. Government officials have embraced the potential for AI development and asked for experts to support its efforts in navigating regulation.^[1] In August 2024, at an address to the Zimbabwe National Defence University, the Zimbabwean President urged the university to undertake more research in the use of emerging technologies such as artificial intelligence and drones for peace and security.^[2]

It has been reported that a national AI policy framework has been drafted, though it is yet to shared publicly or implemented.^[3] Accordingly, assessing the state of AI regulation requires a review of various other law and policy.

As a point of departure, there is the National ICT Policy 2022 – 2027, which identifies priority areas for the government’s ICT development.^[4] Some of these priorities include reviewing applicable legislation and policy, improving digital literacy, and investment and funding. The section dealing with emerging technologies lists AI, among other technologies, as an area to be supported. Notably, the Policy affirms Zimbabwe’s goal to have transformed into a digital economy by 2030. The principles underpinning the policy goals are democracy, equality and inclusiveness, innovation, and sustainability.

According to the Smart Zimbabwe 2030 Master Plan, Zimbabwe intends to have developed effective ICT regulation – through rules, practices, and standards – by 2030.^[5] It does not explicitly mention AI. The plan does, however, include three phases of goals and priorities for Zimbabwe to build a digital government, digital society, and digital economy. The public version of the plan has an incomplete project implementation strategy and no timeline.

The Cyber and Data Protection Act was enacted in 2021,^[6] giving force to the right to privacy as protected under article 57 of the Constitution. The Act designates the Postal and Telecommunications Regulatory Authority (PORTAZ) as the data protection regulator. ^[7] In terms of section 25, data subjects have the right to object to automated processing which produces a legal consequence. To facilitate the implementation of some of the provisions of the Cyber and Data Protection Act, POTRAZ launched a complaints procedure on its website for aggrieved data subjects to file complaints relating to data protection and also intrusion of privacy.^[8]

In September 2024, Zimbabwe also gazetted Statutory Instrument 155 of 2024, which are the Cyber and Data Protection Regulations on the licensing of data controllers and the appointment of Data Protection Officers.^[9] The regulations also lay out the obligations to be met by data controllers in the processing of biometric and genetic data. Of note, Section 8, highlights that data controllers processing data for journalistic purposes are exempt from applying for a data controller licence.

While the contribution of PORTAZ, if any, to the discussion on AI regulation, is unclear, it has reportedly engaged with relevant Parliamentary Portfolio Committees on ICTs.^[10]

The Freedom of Information Act, enacted in 2020,^[11] enables the right to access to information held by public entities including personally identifiable information such as health records and fingerprints. In terms of the Act, the Media Commission, whose primary mandate is to promote and protect freedom of expression, is also mandated to process appeals where requests for access to information have been denied.^[12] The Act imposes a duty on every public entity, public commercial entity, and statutory office to have an information disclosure policy.^[13]

Zimbabwe does not have a dedicated expert body on AI. The Research Council of Zimbabwe (RCZ) appears to have adopted a partial mandate in this realm. Established in 1986, the RCZ is a government body which coordinate research for the benefit of government, academia, and industry.^[14] The RCZ is supporting two academic projects on AI. The first project is titled ‘Advancing Agricultural Sustainability: Leveraging Artificial Intelligence for Optimal Livestock Security and Productivity’.^[15] The second project is titled ‘Developing a Two-Sided Artificial Intelligence Risk Predictive Model for Early Identification of High-Risk Antenatal Mothers: Enhancing Maternal and Neonatal Health Outcomes in Zambia Malawi and Zimbabwe’.^[16]

The Zimbabwe Centre for High Performance Computing (ZCHPC) established in 2015 is another body focused on big data and AI.^[17] In 2019, Statutory Instrument 168 of 2019 was gazetted which outlines the operations and structures of the ZCHPC.^[18] These include improving the usage of cutting-edge technology in government and also providing research on and supporting the development and demonstration of technologies to advance the capacity and capabilities of high-end computing, storage, networking, and related software programmes.

In October 2024, the Minister of ICTs also indicated that the Ministry is in the process of establishing a multistakeholder AI Committee that will act as an advisory body and draw experts from various industries including media and broadcasting, civil community, academia, finance and ICTs among others.^[19]

On the whole, Zimbabwe is in a similar position to Zambia on AI governance in that a clearer regulatory framework seems imminent. Continued multistakeholder collaboration can enhance its current standing.

---

Navigate sections

Explore the rest of the toolkit