Personal data protection in Zanzibar

We are an insurance services company headquartered in Zanzibar, with operations spanning both Mainland Tanzania and Zanzibar. We have heard of cases on personal data protection from mainland Tanzania and wonder whether there is similar law in Zanzibar. Kindly advise.
MK, Zanzibar

The Personal Data Protection Act, Cap. 44 [R.E. 2023], applies to both Mainland Tanzania and Zanzibar. Section 2 of the Act explicitly states that it shall apply to Mainland Tanzania as well as Tanzania Zanzibar, except that in Tanzania Zanzibar, the Act does not apply to non-union matters. To determine what constitutes a non-union matter, reference must be made to the Constitution of the United Republic of Tanzania of 1977. Article 4 of the Constitution distinguishes between Union Matters listed in the First Schedule and non-union matters, which are those not included in that list. The First Schedule outlines twenty-two Union Matters, including: Foreign Affairs; Defence and Security; Police; Emergency Powers; Citizenship; Immigration; External borrowing and trade; Posts and telecommunications; Income tax and customs duties; Banking and currency; Civil aviation; Higher education; Mineral oil and natural gas; Meteorology; Statistics; Registration of political parties, among others.
Given that your company operates in the insurance services sector, which intersects with some Union Matters, you are required to comply with the provisions of the Personal Data Protection Act in Zanzibar to the extent that your operations relate to these Union Matters. We anticipate that the Data Protection Commission will issue further guidelines to clarify the application of the Act in Zanzibar. In the meantime, it is advisable to consult your legal counsel to ensure full compliance with the law.