Zimbabwe regulator denies enforcing new cybercrime law

Details: Manny Pham; Category: Cybersecurity; 26 January 2026; 584 views

Zimbabwe’s telecoms regulator has moved to quash reports claiming a new cybersecurity law has come into force, saying the information circulating on social media and in some media outlets is incorrect.

The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) said it was “concerned” by the claims and clarified that cyber-related offences in the country are prosecuted under Zimbabwe’s existing Criminal Law Act, not a standalone cybercrime or cybersecurity law.

POTRAZ said the current legal framework already covers offences ranging from hacking and unlawful access to data, to the spread of messages intended to incite violence or vandalism. Penalties can include fines and prison sentences of between five and 10 years.

The regulator urged individuals, businesses and media organisations to verify information through official channels before sharing it online, warning that misinformation creates confusion and undermines public understanding of the law.

Such legislation can carry wider implications for free speech, online behaviour, privacy and enforcement powers. Governments globally continue to face criticism as they attempt to strike a balance between tackling online harms and protecting fundamental digital rights.