Legal Framework & Law Enforcement Powers
Cybercrimes Act, 2015
Under Section 32 of the Cybercrimes Act, a law enforcement officer at or above the level of a police station chief can order disclosure of any data—including an IP address—from any person or entity possessing it for purposes of criminal investigation. This can even happen without a court order. If the data owner resists, the officer can seek a court direction to compel disclosure � � �.
cipesa.org
Breakthrough Attorneys
Bowman's Law
Electronic & Postal Communications Act (EPOCA)
EPOCA imposes a duty of confidentiality on ISPs and telecom operators, ensuring customer information stays protected—unless a law authorizes disclosure. Specifically under Sections 98 and 99, operators may disclose customer data only to law enforcement, courts, or other authorized bodies � �.
Interception Regulations
Under the Postal and Electronic Communications (Investigation) Regulations, law enforcement must obtain a warrant from the Inspector General of Police. This allows interception of communications (e.g. tracking behavior or content) and compels disclosure from service providers
Personal Data Protection Act, 2022
This newly enacted law establishes a regulatory framework protecting personal data. It allows data disclosure only where:
The data subject consents,
It’s required by law (such as for criminal investigations),
Or it’s in the public/health interest, among a few other specific exceptions
SIM Registration & Data Sharing
Tanzanian law requires SIM card users to register with personal details (identity card, residence, etc.), and operators maintain these records monthly, accessible by regulatory bodies like TCRA .
How Law Enforcement Can Trace You via IP
Step 1: Law enforcement obtains your IP address (e.g., from an app or website).
Step 2: Using Section 32 of the Cybercrimes Act, they order your ISP or the app provider to hand over the records linked to that IP—no court warrant needed .
Breakthrough Attorneys
Step 3: The ISP discloses your registered personal information (name, ID, billing address).
Step 4: For real-time monitoring or interception, they may use a warrant via the Investigation Regulations .
Step 5: The Personal Data Protection Act supports this process legally, so long as disclosure is “required by law” .