StoneGuard › DPO services
StoneGuard provides outsourced Data Protection Officer services in Zimbabwe. A certified DPO goes on record for your organisation with POTRAZ, runs your licensing and registers, handles data subject requests and breaches, files your annual renewal and attends inspections under the Cyber and Data Protection Act [Chapter 12:07]. Engagements open with a $90 consultation, credited in full toward your package.
Last reviewed 2 September 2026.
A licensed data controller appoints a Data Protection Officer and notifies POTRAZ of the appointment on Form DP2. The DPO is the named person accountable for how your organisation handles personal data.
At Tier 1 a DPO is required only where you process sensitive data, which includes health data, data about children and biometric data. From Tier 2 upward the appointment is part of being a licensed controller.
The appointment is not a formality. The DPO is the person an inspector asks for, the person a data subject writes to, and the person who has to produce the records when something goes wrong.
Most Zimbabwean organisations do not have the volume of privacy work to justify a full time in house appointment, and the qualification requirement makes hiring one slow. Outsourcing gives you a qualified officer on record without carrying the post.
Compliance is a cycle, not a certificate. Once the licence is granted, this is the standing work.
POTRAZ expects a Data Protection Officer to hold the relevant qualifications, and their certificates are filed with Form DP2 as part of the appointment. StoneGuard pairs your organisation with a certified DPO, and the appointment is notified to POTRAZ in your name.
The DPO works in the StoneGuard platform, so your assessment scores, registers, reports and remediation tasks are in one place and current, rather than scattered across spreadsheets and email threads.
A $90 consultation opens the engagement and is credited in full toward your package when you proceed. Onboarding packages start at $250. The ongoing DPO retainer starts when your licence is granted and is quoted for your organisation, based on your records, sites and staff.
POTRAZ fees are paid to POTRAZ at cost, ex VAT, and are separate from the StoneGuard service fee. You will always see two numbers, never one blended figure.
An outsourced DPO is a qualified data protection officer provided by an external firm and appointed as your organisation’s DPO on record with POTRAZ. You get the qualified officer the law requires without creating and filling a full time internal post.
A licensed data controller appoints a Data Protection Officer and notifies POTRAZ on Form DP2. At Tier 1 the appointment is required only where the organisation processes sensitive data such as health data, data about children or biometric data.
POTRAZ expects the appointed officer to hold relevant qualifications in data protection, and their educational or professional certificates are filed with the Form DP2 notification. StoneGuard appoints a certified DPO for your organisation.
A $90 consultation opens the engagement and is credited in full toward your package. Onboarding packages start at $250. The ongoing DPO retainer is quoted per organisation based on your records, sites and staff. POTRAZ fees are separate and are passed through at cost, ex VAT.
Yes. If you have already appointed your own officer, StoneGuard can run the licensing work and give your DPO the platform to manage assessments, registers and reporting. Raise it at the consultation and the engagement is scoped around it.
A $90 consultation opens the engagement and is credited in full toward your package when you proceed. Compliance packages start at $250. POTRAZ fees are separate and are paid to POTRAZ at cost, ex VAT.
Contact StoneGuard: email [email protected], WhatsApp +263 77 272 4514, or call +263 77 143 6742. StoneGuard is based in Harare, Zimbabwe.