Skip to main content

    AI by country · East Africa

    AI in Tanzania: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Tanzania know before starting with AI?

    Tanzania has no dedicated AI law as of 29 October 2026. The Personal Data Protection Act, 2022 is the law that applies to AI today, and every company that collects or processes personal data must register with the Personal Data Protection Commission. A company should register, check which of its AI decisions affect people significantly, and know the rules before personal data leaves the country.

    At a glance

    Tanzania at a glance

    Key facts about Tanzania
    Data protection lawPersonal Data Protection Act, 2022 (Act No. 11 of 2022, Cap. 44), in force since 1 May 2023
    RegulatorPersonal Data Protection Commission (PDPC)
    AI policyNo dedicated AI law or published national AI strategy as of 29 October 2026; a national AI strategy and responsible AI guidelines are in development
    Time zoneEAT, UTC+3 (India is 2.5 hours ahead)
    CurrencyTZS (Tanzanian shilling)
    Business languageKiswahili and English

    Why now

    Why Tanzania is worth watching

    Each point links to the document it comes from.

    • The Personal Data Protection Act, 2022 came into force on 1 May 2023, and an official English version was published on 13 June 2023.[1]

    • The PDPC requires all public and private institutions, companies and NGOs to register on its online system, and runs certified training for data protection officers.[2]

    • In September 2025 the Ministry of Communication and Information Technology said a national guideline for the responsible use of AI was in its final stages.[4]

    • In July 2026 the ICT Minister told a Geneva meeting that Tanzania is developing regulatory frameworks for AI and guidelines for AI in sectors such as education and health.[5]

    • National guidelines on digital technologies and AI in education, from schools to universities, were reported as newly launched in January 2026.[6]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Personal Data Protection Act, 2022: registration and automated decisions

    In force2022No one may collect or process personal data without registering with the Commission as a controller or processor (section 14). A person can require that decisions which significantly affect them are not based solely on automated processing; where they are, the controller must tell the person, who can ask for reconsideration (section 36). Exceptions cover contracts, written law and explicit consent.[1]

    Personal Data Protection Act, 2022: security, transfers and penalties

    In force2022Controllers must notify the Commission of any security breach without undue delay (section 27(5)); the Act sets no fixed number of hours. Transfers abroad need adequate protection in the recipient country or a listed ground such as consent, and the Commission may authorise others with safeguards (sections 31 and 32). The Commission can impose penalties of up to TZS 100 million (section 47), and companies convicted of unlawful disclosure face fines of up to TZS 5 billion (section 60).[1]

    Personal Data Protection (Collection and Processing) Regulations, 2023 (GN No. 449C)

    In force2023A law firm reads regulation 19(3) as requiring you to tell people when automated decision-making is involved, and regulations 20 to 22 as adding detail on transfers. We could not open the regulation text ourselves, so check it before relying on these points.[3]

    National guideline for the responsible use of AI

    Draft2025The ministry said in September 2025 that it was in its final stages. We found no published final version as of 29 October 2026, so we do not describe its content.[4]

    Where AI fits first

    Where AI fits first

    Banking and mobile money

    Fraud detection, credit checks with human review, and customer service in Kiswahili and English.

    Credit decisions made solely by a model fall under section 36 of the Act, so people must be told and can ask for reconsideration. We found no AI-specific rule from the Bank of Tanzania.[1]

    Education

    Tutoring support, marking help and administrative drafting, with teachers in charge.

    National guidelines on digital technologies and AI in education were reported as launched in January 2026.[6]

    Health care

    Summarising patient records and triage support, with clinicians making decisions.

    Health data is sensitive personal data under the Act. The ICT Minister named health as a sector for national AI guidelines.[5]

    Agriculture

    Crop disease detection from photos and farming advice in Kiswahili.

    We found no AI rule specific to agriculture. Data about identifiable farmers is personal data under the Act.[1]

    Your first steps

    Your first steps

    1. Register with the PDPC as a data controller or processor before you collect or process personal data.
    2. List every AI decision that significantly affects a person, and set up a way to tell them and reconsider the decision on request.
    3. Check whether your AI tools send personal data abroad, and record the legal ground under sections 31 and 32 for each transfer.
    4. Set up a breach process that notifies the PDPC without undue delay; plan for a short window, since the Act gives no fixed number of hours.
    5. Run a data protection impact assessment before deploying AI on personal data. A law firm recommends this as good practice.
    6. Train a data protection officer; the PDPC runs certified programmes.
    7. Watch for the national AI strategy and responsible AI guideline from the ICT ministry.

    AI services for Tanzania

    AI consulting and development for teams in Tanzania

    We work remotely with companies in Tanzania, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Tanzania is on UTC+3 and India on UTC+5:30, a 2.5 hour gap. Taking a 9:00 to 17:00 day in Tanzania and 9:30 to 18:30 in India, the overlap is about 7 hours, from 09:00 to 16:00 Tanzanian time.

    Questions

    Common questions about AI in Tanzania

    Does Tanzania have an AI law?

    Not as of 29 October 2026. A national AI strategy and a responsible AI guideline are being developed. The Personal Data Protection Act, 2022 is the main law that applies to AI that uses personal data.

    Do I need to register before using AI on customer data?

    Yes, if you collect or process personal data. Section 14 of the Act says no one may do so without registering with the PDPC, and the PDPC runs an online registration system.

    How fast must I report a data breach?

    Section 27(5) says without undue delay. The Act does not define that, and a law firm notes that neighbouring countries usually read it as 48 to 72 hours.

    What are the penalties?

    The Commission can impose a penalty of up to TZS 100 million. Courts can fine a company up to TZS 5 billion for unlawful disclosure or sale of personal data, and other offences carry fines of up to TZS 5 million or prison.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] United Republic of Tanzania, Government Notice No. 395B of 2023 (copy hosted by TanzLII), 2023-06-13. The Personal Data Protection Act, Chapter 44 (official English version)(media.tanzlii.org)
      Full title and what we used it for

      The Personal Data Protection Act, Chapter 44 (official English version). Primary. Read in full. Used for the 1 May 2023 commencement shown on the Act, and sections 14, 27(5), 31, 32, 36, 47, 60 and 63.

    2. [2] Personal Data Protection Commission, 2026-10-29. PDPC home page(pdpc.go.tz)
      Full title and what we used it for

      PDPC home page. Primary. Used for the registration requirement notice, the online registration system, the list of regulations and the DPO training programmes. No AI guidance was listed.

    3. [3] Clyde & Co, 2026-07-01. The Use of Artificial Intelligence (AI) in Tanzania: What Entities Need…(clydeco.com)
      Full title and what we used it for

      The Use of Artificial Intelligence (AI) in Tanzania: What Entities Need to Know About Data Protection Compliance. Law firm analysis, used for interpretation only. Used for the point that Tanzania has no AI-specific law, and for its reading of GN No. 449C regulations 19(3) and 20 to 22, which we could not verify in the regulation text.

    4. [4] Daily News (Tanzania), 2025-09-16. AI guideline in final stages, govt confirms(dailynews.co.tz)
      Full title and what we used it for

      AI guideline in final stages, govt confirms. Press report of remarks by the Permanent Secretary, Ministry of Communication and Information Technology. Used for the status of the responsible AI guideline.

    5. [5] The Citizen, 2026-07-07. Tanzania calls for stronger global cooperation on AI governance(thecitizen.co.tz)
      Full title and what we used it for

      Tanzania calls for stronger global cooperation on AI governance. Press report of the ICT Minister's remarks in Geneva on 6 July 2026. Used for the government's stated AI framework work and named sectors.

    6. [6] Daily News (Tanzania), via AllAfrica, 2026-01-15. Tanzania: Varsities Urged to Embrace AI, Digital Technologies(allafrica.com)
      Full title and what we used it for

      Tanzania: Varsities Urged to Embrace AI, Digital Technologies. Press report. Used for the National Guidelines for the Use of Digital Technologies and AI in Education, described as newly launched.

    7. [7] Clyde & Co, 2026-02-09. Notification obligations arising from personal data breaches in Tanzani…(clydeco.com)
      Full title and what we used it for

      Notification obligations arising from personal data breaches in Tanzania: Key considerations for entities. Law firm analysis, used for interpretation only. Used for the point that undue delay is not defined and is commonly read as 48 to 72 hours in the region.

    8. [8] International Telecommunication Union, WSIS Forum 2026, 2026-07-09. Tanzania e-Government AI initiatives to enhance service delivery(itu.int)
      Full title and what we used it for

      Tanzania e-Government AI initiatives to enhance service delivery. Session listing. Used for the point that the National AI Strategy was still in development in July 2026.

    This is general information, not legal advice. We could not read the 2023 regulations or the AI guideline drafts ourselves, and those points rely on law firm and press reports. Check with a qualified Tanzanian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Tanzania?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score