On a constitutional challenge to thirteen sections of the Personal Data Protection Act 2022, the High Court held that section 23(3)(c) and (e) was ambiguous, unclear and without prescribed procedures, and ordered that the identified provisions be amended within one year to provide certainty as to what acts or omissions are unlawful and to guarantee full consent for data collection, failing which they would be struck from the statute.

The first constitutional challenge to Tanzania's Personal Data Protection Act 2022 and the first Tanzanian superior-court engagement with the new statute. It demonstrates judicial willingness to test data-protection legislation against constitutional standards and to compel legislative correction of vague provisions, embedding a rights-based check on the framework. NOTE: the full judgment was not located in a public database; the holding is drawn from contemporaneous reporting of the ruling and should be confirmed against the primary judgment by a reviewer.