Data Protection in Employment: Implications of the Personal Data Protection Act in Tanzania
DOI:
https://doi.org/10.6092/issn.2421-2695/22368Keywords:
labour law, employee, personal data protection, employment, Personal Data Protection ActAbstract
Innovations in technology, their varied uses, and the widespread use of social media have all advanced more quickly than in the past, both globally and in the workplace, where employee and customer data is constantly being collected and digitally documented. For this reason, the need for regulatory compliance on protecting personal data in the workplace is paramount. Based on critical analysis of the relevant legislation, case laws, and literature, this article reviews the current state of privacy and data protection in the employment context in Tanzania. This article discusses the implications of the new data protection legislation in Tanzania with a focus on privacy and data protection rights and employee monitoring issues that human resource professionals, managers and employers must be aware of. As it is common for employers to keep employment records, which amount to data, employment is one of the numerous areas and facets in Tanzania that are impacted by the PDPA, 2022. In accordance with the PDPA, employers have a responsibility to protect employee data as data controllers who process sensitive personal data to satisfy the condition that the processing is necessary for the purposes of compliance with the ELRA. Finally, this article recommends that like the EU’s W29 opinion on protection of employee personal data, a special guidance note tailored on employee personal data protection from the PDPC will improve employee privacy in Tanzania.
References
Albrecht J., Inofficial Consolidated Version after LIBE Committee Vote Provided by the Rapporteur (published 22nd of October 2013, accessed July 12, 2024, http://www. janalbrecht.eu/fileadmin/material/Dokumente/DPR-Regulation-inofficial-consolidated-LIBE. pdf)
Article 29 – Data Protection Working Party, Opinion on the Processing of Personal Data in the Employment Context, Executive Summary, published 2001, accessed July 18, 2024, http://ec.europa.eu/justice/dataprotection/article29/documentation/opinionrecommendation/files/2001/wp48sum_en.pdf
Article 29 – Data Protection Working Party, Working document on the Surveillance of Electronic Communications in the Workplace, published 2002, accessed July 113, 2024, http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2002/wp55_en.pdf
M. Bakar - Y. Mohd, Data privacy and data protection, Petaling Jaya: Sweet and Maxwell Asia, 2002
Boshe P., Data Privacy Reforms in Tanzania, in African Data Privacy Laws, Springer, 2016.
Boshe P., Interceptions of communications and the right to privacy: Commentary on Zitto kabwe’s political saga, in Open University Law Journal, Vol. 4, No. 2:1-5.
Braverman H., Labor and Monopoly Capital; The Degradation of Work in the Twentieth Century, NYU Press, 1998.
Busch K., Hermann C., Hinrichs K. und Thorsten S., Eurokrise, Austeritätspolitik und das Europäische Sozialmodell, Wie die Krisenpolitik in Südeuropa die soziale Dimension der EU bedroht, Friedrich-Ebert-Stiftung, November 2012, accessed August 4 2024, http://library.fes.de/pdf-files/id/ipa/09444.pdf
Business Daily, Limits of employers on staff data privacy rights. Business Daily (18th Sept. 2020).
Clyde & Co, Tanzania: The Personal Data Protection Act of 2022. (16th February 2023).
Delbar C. et al., New technology and respect for privacy at the workplace, in European Industrial Relations Observatory, 2003.
Ebert I., I. Wildhaber & J. Adams-Prassl, Big Data in the Workplace: Privacy Due Diligence as a Human Rights-Based Approach to Employee Privacy Protection (2021) in Big Data & Society 2021, 8, 1, https://doi.org/10.1177/20539517211013051
Electronic and Postal Communications (Consumer Protection) Regulations, GN No. 61 of 2018
European Data Protection Board (EDPB), Company fined 150,000 euros for infringements of the GDPR. Available at: https://rb.gy/wmq8g5
FB Attorneys, High Court Pronounces Landmark Decision on Instagram Video, 7th August 2024.
S. Gutwirth et al. (eds.), Reforming European Data Protection Law, Law, Governance and Technology Series, Springer, 2015, DOI https://doi.org/10.1007/978-94-017-9385-8__6
Habinsky J. & H. Boone, Monitoring and protecting employee privacy, XpertHR Employment Law Manual, 2022.
Hassan K., Personal data protection in employment: New legal challenges for Malaysia, in Computer Law & Security Review, Volume 28, Issue 6, 2012, https://doi.org/10.1016/j.clsr.2012.07.006.
Hendrickx, F., Protection of workers’ personal data in the European Union, Two Studies. University of Leuven/Tilburg, 2002, accessed February 4, 2014, http://collection. europarchive.org/dnb/20070702132253/.
Hirsh E., & G. Olson, Starting from Marginalized Lives: A Conversation with Sandra Harding, in JAC, Journal of Rhetoric, Culture, & Politics, 1995, accessed August 4 2024, http://www.jaconlinejournal.com/archives/vol15.2/hirsch-starting.pdf
International Labour Organization, “Protection of Workers’ Personal Data,” Geneva 1997, accessed 2nd of February 2014 http://www.ilo.org/wcmsp5/groups/public/---ed_protect/---protrav/---safework/documents/normativeinstrument/wcms_107797.pdf
Knorr-Cetina, K., Manufacture of Knowledge, Oxford, 1981.
Makulilo A., African Data Privacy Laws, Springer, 2016.
Mitrou L. M. Karyda, Employees’ privacy vs. employers’ security, Can they be balanced? Elsevire Ltd., 2005.
Mitrou, L, Maria Karyda, Employees’ privacy vs. employers’ security, Can they be balanced? Elsevire Ltd. 2005, accessed February 4, 2014, http://www.icsd.aegean.gr/website_ files/metaptyxiako/82038633.pdf
Molè M. – Mangan D., ‘Just More Surveillance’: The ECtHR and Workplace Monitoring, in European Labour Law Journal, 2023, 14, 694
Molè M., The Internet of Things and Artificial Intelligence as Workplace Supervisors: Explaining and Understanding the New Surveillance to Employees Beyond Art. 8 ECHR, in Italian Labour Law e-Journal, 2022, 15, 87.
Mujtaba B., Digital Literacy on Privacy Rights Policies in the American Workplace, in Multidimensional and Strategic Outlook in Digital Business Transformation. Contributions to Management Science. Springer, Cham 2023. https://doi.org/10.1007/978-3-031-23432-3_10
Ogriseg C., GDPR and Personal data Protection in the Employment Context, in LLI, 2017, Vol 3, No 2.
Olsen C., To track or not to track? Employees’ data privacy in the age of corporate wellness, mobile health, and GDPR, in International Data Privacy Law, 2020, Vol. 10. No. 3.
Personal Data Protection (Personal Data Collection and Processing) Regulations, GN No. 449C 2023
Personal Data Protection Act, CAP 44 2022
Rosemblat A. - T. Kneese - D. Boyd, Future of Labor: Workplace Surveillance, in Data & Research Institute, 2014.
Schaar P., Die geplante EU-Datenschutz-Grundverordnung, Auch beim Beschäftigtendatenschutz ist ein Nachbessern erforderlich, in Computer und Arbeit , 2013, 3.
PM. Schwartz - KN. Peifer, Transatlantic data privacy (November 7, 2017), in The Georgetown Law Journal, 2017, 106-115, UC Berkeley Public Law Research Paper. Available at SSRN: https://ssrn.com/abstract=3066971.
Swell G., Nice Work? Rethinking Managerial Control in an Era of Knowledge work, Organization 2005, 12, 685.
Ubena J., Privacy - a forgotten right in Tanzania. Tanzania Lawyer, I/2JTLS 2012, 72-114
Wahlgren P., Information and Communications Technology Legal issues: Data protection and Privacy, in Scandinavian studies in law, 2010.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Mark Malekela, Aliko Simon
This work is licensed under a Creative Commons Attribution 4.0 International License.
