
By Phiwa Sikhondze
Eswatini has emerged as a regional leader in data privacy, solidifying its position among the top three Southern African Development Community (SADC) countries with advanced data protection frameworks.
This milestone was highlighted during the 2025 Data Protection Day, where the Ministry of Information Communications and Technology (ICT) and the Eswatini Data Protection Authority (EDPA) outlined the country’s progress in safeguarding personal information.
Speaking at the commemorative event, the Minister of ICT, Savannah Maziya, highlighted Eswatini’s strides in data protection since the enactment of the Data Protection Act in 2022.
She noted that the law paved the way for establishing the EDPA in January 2023, making Eswatini the third country in SADC, after Angola and South Africa, to establish a dedicated regulatory body for data protection.
“The establishment of the EDPA was more than a regulatory milestone; it was a leap towards our national vision of attaining First-World status,” the Minister stated. “This move reflects our commitment to protecting the privacy of emaSwati and fostering trust in the digital age.”
Eswatini’s proactive approach has also gained international recognition. In May 2022, the EDPA joined the Network of African Data Protection Authorities, marking the country’s entry into the continental and global conversations on privacy and data security. The Minister revealed that Eswatini actively participates in African Union activities tied to the Malabo Convention, which the country is in the process of ratifying.
“This achievement underscores Eswatini’s dedication to aligning with global data protection standards and contributing to international regulatory discourse,” Maziya remarked.

During the event, the Minister emphasized the importance of compliance with the Data Protection Act. All organizations, particularly government ministries, were urged to register with the EDPA to ensure they meet the legal requirements for processing personal data. She warned that processing data without registration violates the law and undermines public trust.
Quoting the EDPA’s slogan, the Minister reminded attendees: “If you can’t protect it, don’t collect it.” The message resonated strongly as panelists and stakeholders engaged in discussions on this year’s theme, “Whose Data Is It Anyway?”