POTRAZ Data Protection Compliance

Our Commitment to POTRAZ Compliance

ArkPortal is fully compliant with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) data protection regulations. We have implemented comprehensive measures to ensure the protection of personal data and maintain the highest standards of data security and privacy.

How We Ensure Compliance

1. Data Processing Lawfulness

All personal data processing activities are conducted on lawful bases, including:

• Explicit consent from data subjects
• Contractual necessity for service delivery
• Legitimate business interests with appropriate safeguards
• Legal compliance requirements

2. Technical and Organizational Measures

We have implemented robust security measures including:

• End-to-end encryption for data transmission and storage
• Multi-factor authentication and access controls
• Regular security audits and vulnerability assessments
• Secure data centers with physical access controls
• Employee training on data protection practices
• Incident response and breach notification procedures

3. Data Subject Rights Implementation

We have established processes to honor all data subject rights:

• Right to access personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for all high-risk processing activities, particularly for our ArkPortal Echo transcription services, to identify and mitigate privacy risks.

Cross-Border Data Transfers

When transferring personal data outside Zimbabwe, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms as required by POTRAZ regulations.

Breach Notification Procedures

We have established procedures to detect, investigate, and report data breaches to POTRAZ within the required timeframes, and to notify affected individuals when necessary.

Regular Compliance Monitoring

Our compliance program includes:

• Quarterly compliance reviews and audits
• Annual policy updates and staff training
• Continuous monitoring of data processing activities
• Regular consultation with legal experts on regulatory changes

Contact Us for Data Protection Inquiries

For any data protection inquiries, complaints, or to exercise your rights, please contact us:

Regulatory Authority Contact

If you have concerns about our data processing that cannot be resolved directly with us, you have the right to lodge a complaint with POTRAZ: