The Act applies to the processing of personal data entered in a file or for a data controller in Botswana and where the data controller is not in Botswana, by using automated or non- automated means situated in Botswana, unless those means are used only to transmit personal data.

This section discusses the processes required in order to ensure compliance with the Data Protection Act. What it means to process data, and the criteria for processing such data.

Discussions on the Data Protection Act. The Act defines personal data, it sets conditions for lawful processing of personal data and sensitive personal data, outlines the rights and obligations of the parties involved in processing data, establishes channels for complaints by data subjects against contraventions by data controllers, and provides for sanctions in the form of fines and imprisonment for contraventions.

This section sets out the roles and responsibilities of the Data Protection Commission, and the penalties for non compliance with the Data Protection Act.

The rights granted to Data Subjects, include the right to be informed, the right to access, the right to rectification and the right to object/opt-out.

This section sets out the obligations of a data controller