…signaling Botswana’s commitment to aligning with global data protection standards
Botswana’s Data Protection Act 18 of 2024 has officially came into effect as of January 14, 2025, sparking widespread attention affecting organisations far and wide with social media platforms such as but not limited to Facebook, Instagram, TikTok, and others operating within or targeting users in the country.
With the law’s stricter provisions on data privacy and security, these platforms must adjust their operations to comply with the enhanced legal framework. The updated cct signals Botswana’s commitment to aligning with global data protection standards while safeguarding its citizens’ digital rights.
The Act’s jurisdiction now extends to international platforms that process data belonging to Botswana’s citizens. Social media platforms offering services, selling products, or even monitoring online behavior in Botswana are subject to these regulations. This move ensures that platforms handling local user data are held accountable, regardless of where they are headquartered.
One key focus of the legislation is the protection of individual rights. Users on social media now have the right to access their data, demand corrections, request deletions, and object to certain data processing activities, such as targeted advertising. For platforms relying heavily on personalized content and advertisements, this presents significant operational challenges. Mechanisms enabling users to exercise these rights must be clearly outlined and easily accessible.
The law also introduces specific protections for children’s data, a particularly pressing concern for platforms like TikTok and Instagram, which attract large numbers of young users. The Act requires parental consent for processing data of minors under 18, except in cases where minors aged 16 and above provide consent under defined circumstances. This implication reaches far and wide as the minimal age of sign up for social media platforms is 13. Leading to Platforms being mandated to implement robust age verification systems and ensure that their policies reflect this obligation.
Data transfers across borders are another area of scrutiny. Social media companies must ensure that any data leaving Botswana is sent to jurisdictions with equivalent privacy protections or safeguarded through approved mechanisms. This could complicate the operations of platforms that rely on global data centers for storage and processing.
Failure to comply with the law carries steep penalties. Organizations, including social media companies, could face fines of up to BWP 50 million or 4% of their global turnover, depending on the severity of the breach. Such penalties underscore the importance of compliance, especially for high-profile platforms managing millions of user accounts.
The Act further mandates that platforms implement enhanced cybersecurity measures to protect user data from breaches and unauthorized access. Given the increasing frequency of data breaches on social media platforms, this provision is likely to require significant investments in security infrastructure and protocols.
Transparency and accountability are central to the updated legislation. Platforms must not only comply with the law but also demonstrate their commitment to data protection through public-facing policies and regular updates. The appointment of Data Protection Officers (DPOs) to oversee compliance efforts and engage with Botswana’s Information and Data Protection Commission is also required for large-scale data handlers.
For social media platforms, the updated Data Protection Act represents both a challenge and an opportunity. On one hand, the stringent requirements may necessitate substantial operational changes, from revising data policies to enhancing user consent mechanisms. On the other hand, adherence to these laws could bolster user trust, positioning compliant platforms as responsible stewards of personal data in an era of growing privacy concerns.
Now that the Act is officially in force, the spotlight is on social media companies to align with Botswana’s new regulations. Platforms that act proactively to meet these requirements not only avoid legal repercussions but also demonstrate their commitment to protecting the privacy and rights of their users in Botswana and beyond.
