As of the most recent public reporting, Botswana’s Information and Data Protection Commission is legally established under the Data Protection Act, 2024, but was still building out its basic operational capacity. That includes having no dedicated public website at the time of that reporting.

This article is time-bound, current-affairs information, not a description of anything the Act itself says. Treat it as a snapshot that will go out of date as the Commission develops, not a permanent fact about the regulator.

What the reporting actually said

The most recent public account of the Commission’s operational state comes from a Botswana Daily News report dated 29 July 2025, a government-outlet news article rather than a legal document. A few points from that reporting are worth setting out plainly, since they are the basis for everything else in this article:

The Commissioner had, at that point, engaged only three contract officers, pending approval of further posts, including a Deputy Commissioner and two Director-level roles.

The report also noted there was no permanent office address yet, with the official address and contact details to be published once the Commission secured permanent premises, and no dedicated public website, with a PR officer tasked with eventually establishing one.

We are treating that report as a secondary source describing the Commission’s operational status at a point in time, not as part of the Act itself. Nothing in the Act sets a deadline for when the Commission has to reach any particular level of staffing or public presence.

What this practically means right now

A few things a business or individual might reasonably want to do currently depend on channels that were not yet fully public as of that report:

  • Filing a complaint with the Commission. See complaints for what the process is meant to look like once fully accessible.
  • Checking whether a specific country has adequacy status for cross-border transfers. See international data transfers for why this matters and what the recognised alternatives are in the meantime.
  • Submitting a data protection officer’s contact details, where the Act requires notifying the Commission of a DPO appointment. See data protection officer.

None of these processes have a confirmed, fully public channel as of the most recent reporting available. The realistic advice is to watch the Government Gazette and reputable Botswana news outlets for updates on the Commission’s office, contact details, and website, and to check back with the Commission page in this guide, which Digital Thread will update as the Commission’s public presence develops.

We are not publishing a phone number, email address, or physical address for the Commission here, because as of the most recent reporting, none of those had been made public yet. Any source claiming to have official IDPC contact details beyond what reputable Botswana news has reported should be treated with caution until the Commission itself confirms them.

The Act is fully in force regardless

This is the point worth being clearest about. The Data Protection Act, 2024 has been in force since 14 January 2025, and every obligation it places on a controller or processor applies now, independent of how far along the Commission is in building its own operational capacity. A business cannot treat compliance as optional, or as something to revisit later, just because the regulator enforcing the Act is still getting established. The Commission’s operational state affects how easily a complaint gets filed or a query gets answered. It does not affect whether the underlying law applies to you today.