Trains models, in Zimbabwe

Cyber and Data Protection Act [Chapter 12:07] (No. 5 of 2021), s. 35, substituting ss. 163-166 of the Criminal Law (Codification and Reform) Act [Chapter 9:23] · Read the law's page

• Do not access data, a computer programme, or a computer system if you know or suspect you must obtain prior authority to access it and have not obtained that authority.
• Do not intercept a private data transmission, overcome or circumvent a protective security measure, or acquire data within or transmitted to or from a computer system without lawful authority.
• Do not damage, delete, alter, or block access to computer data, or interfere with the functioning of a computer or information system, without lawful authority.
• Do not communicate, disclose, or use an access code, password, or programme designed to gain unauthorised access to data or a computer system.

Cyber and Data Protection Act, No. 5 of 2021 (Zimbabwe), general duties (ss. 8-10, 13, 15-18 and 20-27) · Read the law's page

• Process personal data necessarily, fairly, lawfully and for specified, legitimate purposes before a crawler or AI training pipeline collects or uses personal data of a person in Zimbabwe.
• Notify the Authority before any wholly or partly automated processing operation, and notify it again of any modification to the information you gave.
• State in that notification the date and the instrument permitting the processing, who you are, what the processing is called and what it is for, the categories of data and of data subjects, the safeguards on disclosure to third parties, how data subjects are informed and can exercise access, any linked processing, the retention period, an assessment of whether your security measures are adequate, any data processor you use, and the transfers you plan.
• Notify the Authority of the appointment of your data protection officer, and have the officer ensure compliance, handle requests made to you and work with the Authority.
• Take the security measures section 18 requires, keep your processing open as section 23 requires, and be accountable for it as section 24 requires.