Can I appoint a DPO now and complete the POTRAZ certification later?
Short answer
Appoint now and book the POTRAZ-approved certification immediately. SI 155 of 2024 requires the Data Protection Officer to undergo the approved certification course; until they have done so, POTRAZ may treat your DPO appointment as incomplete, but a filed Form DP2 with a course booking is far better than nothing.
What the law says
SI 155 imposes two separate duties: to appoint and notify a DPO (Form DP2) and to ensure the DPO undergoes the approved certification. The Regulations do not state a period within which certification must follow appointment, but the original 90-day appointment deadline and the 12 December 2024 target date for certification announced at the time show that POTRAZ expected the two to happen together. An uncertified DPO does not meet section 13's qualification requirement.
Example
A logistics company in Beitbridge appoints its operations manager as DPO on 1 October, files Form DP2 the same week with a letter confirming that he is enrolled on the next certification course starting 20 October, and attaches the enrolment receipt. When a POTRAZ inspector visits in November, the company can show the appointment, the booking and the course in progress. Another company in the same town filed nothing "until the certificate arrives" and is recorded as having no DPO at all.
In practice
File Form DP2 now; add the certification date and certificate number later with a short update (changes must be notified within 14 days anyway). If the course is oversubscribed, consider an interim external certified DPO so that the role is covered while your internal candidate waits.
General information, not legal advice. This page covers Zimbabwean law only: the Cyber and Data Protection Act [Chapter 12:07], Statutory Instrument 155 of 2024 and POTRAZ’s 2025 Implementation Guidelines. It is not the EU GDPR and not South Africa’s POPIA. Fees, fine levels and deadlines are as gazetted and published by POTRAZ at 9 September 2026; check the latest POTRAZ notices before acting. Businesses named in examples are fictional.