In its first determination under the Personal Data Protection Act 2022, the Personal Data Protection Commission found the respondent liable for unlawfully posting and commercialising the image of a newborn child on Instagram without the consent of the child's parents, holding that a child's image is personal data that may not be processed for commercial purposes absent a lawful basis and parental consent.

The inaugural ruling of Tanzania's Personal Data Protection Commission and its first statement on children's data, establishing that processing a minor's image, including for commercial gain on social media, requires verifiable parental consent. It marks the Commission's transition into active adjudication. NOTE: the holding is drawn from reputable Tanzanian legal analysis; the Commission has not published the full determination text, which a reviewer should confirm.