Privacy Notice

The Botswana Communications Regulatory Authority (BOCRA or The Authority) was established through the Communications Regulatory Authority Act, 2012 (CRA Act) to regulate the communications sector in Botswana, comprising telecommunications, Internet and Information and Communications Technologies (ICTs), radio communications, broadcasting, postal services, and related matters.

The Authority is committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect, use, and safeguard the information you share with us in accordance with the Botswana Data Protection Act, 2024 (BDPA), and applicable laws governing the communications sector.

This notice applies to all personal data collected, processed, and stored by the Authority in delivery of its mandate and all its services.

• From Customers: all personal data about you that will assist us to deliver our services to you, for example, your name, contact details and any information related to the service being requested.
• From Suppliers: all personal data about you that will assist us to honour our commitments, for example, contact information, bank details,
• For security: We will also collect data we deem necessary to ensure security of the building and the people in the building. 

For

• Compliance with our statutory mandates as defined by the CRA Act.
• Procurement purposes
• Recruitment and employment purposes
• Ensuring security of the building and those in the building

• Government Entities: When required by law or to ensure regulatory compliance, for example tax authorities and law enforcement agencies.
• Service Providers: Authorised third parties assisting in our operations or to assist deliver our services to you, for example, such pension funds, medical aid providers and insurance providers, security providers etc.
• Legal Entities: Towards legal proceedings or investigations.

We do not sell your information to third parties.

The Authority employs robust organisational and technical security measures to safeguard your data, including but not limited to:

• Implementation of our privacy and information security policies
• Encryption of sensitive data.
• Regular security audits.
• Access control mechanisms to ensure only authorised personnel can access personal data.
• IT monitoring to safeguard workplace digital assets and prevent cyber threats.
• Background checks for onboarding staff

Under the BDPA, you have the right, but not limited to: 

• Be informed about how your personal data is processed.
• Access and obtain a copy of your personal data.
• Request correction or deletion of your inaccurate data.
• Restrict processing of your personal data under specific circumstances.
• Withdraw consent for your data processing.
• Lodge complaints with the Information and Data Protection Commissioner.

• The Authority retains your personal data only for as long as necessary to fulfil the purposes outlined in this notice or as required by relevant local laws and regulations.
• The Authority uses localised servers and cloud services which meet the requirements of the BDPA to process and store information and maintain stringent security measures for personal data.
• For statistical and archiving purposes, the Authority is guided by the relevant local laws and regulations.

The Authority updates this Privacy Notice periodically to reflect changes in our practices or applicable laws. Updated notices will be available on our website.

For questions or concerns regarding this Privacy Notice or the handling of your personal data, contact us at:

Botswana Communications Regulatory Authority (BOCRA)
Physical Address: Plot 50671 Independence Avenue, Gaborone, Botswana
Email: dataprotection@bocra.org.bw
Phone: +267 3685432 / 3685516
Website: www.bocra.org.bw