The Centre for Infectious Disease Research in Zambia (CIDRZ), in collaboration with the Ministry of Health, convened a two-day review meeting with key stakeholders to assess the Health Data Management Regulations, specifically the draft Statutory Instrument (SI) 2025 of the national Data Protection Act 2021.

During the meeting, Ministry of Health Assistant Director for Information Communication and Technology (ICT), Mirriam Musama, described the gathering as a milestone in Zambia’s efforts to strengthen the legal framework for managing, sharing, and protecting health data.

Ms Musama said the meeting provided a crucial platform for stakeholders to discuss, refine, and strengthen the draft regulations, essential for ensuring a secure, ethical, and accountable management of health data in Zambia.

“Following the launch of the Zambia Health Data Governance Framework and guidelines in 2024, there was a clear need for legal enforceability to ensure secure and ethical health information management. The draft SI we are reviewing today reflects a collaborative effort by stakeholders to provide a strong regulatory foundation,” she said.

Meanwhile, Data Protection Commissioner Mr Likando Luywa also commended CDC, CIDRZ, the Ministry of Health, and other implementing partners for their contributions to data governance during the development of the Statutory Instrument (SI).

Deputy Data Protection Commissioner Ms Misozi Banda commended the partners for collaborating with the commission to develop the first sector-specific guidelines on health data.

“We, at the Data Protection Commission, are delighted to be part of the first sector-specific guidelines on health data. This process will inform the development of regulations into a Statutory Instrument, expanding our mandate with clarity in each respective sector, including health data,” she said.

CIDRZ’s Yasa Bwalya, provided an overview of the draft Health Data Regulations’ key focus areas, highlighting principles and accountability for health data management.

Ms Bwalya also highlighted data custodianship, migration, archiving, and restrictions on unauthorised access. She thanked participants for their commitment to advancing Zambia’s digital health agenda, urging them to thoroughly review the draft SI to validate its contents, identify gaps, and suggest new additions.

The review brought together a broad range of stakeholders, including the Ministry of Health, CDC, Ministry of Technology and Science, Ministry of Justice, University Teaching Hospitals, Zambia National Public Health Institute (ZNPHI), World Health Organization (WHO), Zambia Research and Education Network (ZAMREN), African Public Health Laboratories (APHL), National Health Information Management Authority (NHIMA), Defence Forces Medical Services (DFMS), Program for Appropriate Technology in Health (PATH), Institute of Health Management (IHM), Prudential Insurance Zambia Limited, Health Professions Council of Zambia (HPCZ), National Health Regulatory Authority (NHRA), SolidaMed Zambia, Systems for Development and the Christian Health Association of Zambia (CHAZ).