Privacy Policy: Consent and Public Rights under CPDA SI 155 of 2024

This section of our Privacy Policy outlines how we obtain and manage your consent for the processing of your personal information, with specific regard to the rights of practitioners as stipulated under the Cyber and Data Protection Act Statutory Instrument 155 of 2024 (hereinafter referred to as “the CPDA”).

1. Consent for Processing Personal Information

We are committed to processing your personal information lawfully and transparently. In accordance with the CPDA, we will obtain your explicit consent before processing your personal information, except where processing is otherwise permitted or required by law.

1.1 What Constitutes Consent:

For consent to be valid, it must be:

• Freely Given: Your decision to provide consent must be voluntary, without any coercion or undue influence.
• Specific: You will be asked to consent to the processing of your personal information for specified, clear, and legitimate purposes.
• Informed: We will provide you with clear and concise information about:
  • The types of personal information we will be collecting and processing.
  • The purposes for which your personal information will be processed.
  • How long will your personal information be retained.
  • Who will have access to your personal information (categories of recipients).
  • Your rights regarding your personal information, as detailed below.
  • The potential consequences of providing or withholding consent.
• Unambiguous: Your consent will be indicated by clear affirmative action, such as ticking a box, clicking a button, or making a clear statement.

1.2 How We Obtain Consent:

We will obtain your consent through clear and user-friendly mechanisms, which may include:

• Online Forms: When you register for our services or interact with our platform, you may be required to provide your consent through dedicated checkboxes or buttons.
• In-App Notifications: For certain processing activities, we may request your consent through notifications within our application.
• Written Agreements: In some cases, we may obtain your consent through written agreements.

1.3 Withdrawing Your Consent:

You have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, please contact us using the contact details provided at the end of this Privacy Policy. Upon receiving your withdrawal request, we will cease processing your personal information for the purposes for which you previously consented, unless we have another lawful basis for processing.  

2. Rights of Practitioners under the CPDA

As a practitioner whose personal information we process, you have specific rights under the CPDA SI 155 of 2024. These rights include, but may not be limited to:

• Right to be Informed: You have the right to be informed about the collection and use of your personal information, as detailed in this Privacy Policy and at the point of data collection.
• Right to Access: You have the right to request access to your personal information that we hold and to receive a copy of it.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Erasure: Under certain circumstances, you have the right to request that we erase your personal information.  
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain situations.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.  
• Right to Object: You have the right to object to the processing of your personal information in certain circumstances, including processing for direct marketing purposes.  
• Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless certain conditions are met.  

3. Exercising Your Rights

If you wish to exercise any of your rights as a practitioner under the CPDA, please contact us using the contact details provided at the end of this Privacy Policy. We will respond to your request within the timeframe stipulated by the CPDA. We may require you to provide proof of your identity before we can process your request.  

4. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact the Data Protection Officer on:  

Health Professions Authority Zimbabwe

7 Ross Ave, Belgravia

dpo@hpa.co.zw

+263772 161 770/1

Please Note: This Privacy Policy is intended to provide a general overview of our practices regarding consent and practitioner rights under the CPDA SI 155 of 2024. It is essential to refer to the full text of the Statutory Instrument for a comprehensive understanding of your rights and our obligations. This policy will be reviewed and updated as necessary to ensure compliance with the CPDA and any subsequent amendments.