Checklist
To register as a Data Controller with POTRAZ you need your certificate of incorporation, a completed Form DP1 licence application, a Form DP2 notification naming your Data Protection Officer with their identity document and certificates, your entity particulars, your record volume for tier confirmation, and from Tier 2 upwards proof of payment of the application fee.
Last updated 2026-08-28. Lioncap Ventures, Harare, Zimbabwe.
This is the full set. We ask for all of it at acceptance rather than in pieces, because a filing that is held up waiting for one certificate is a filing that misses its date. Nothing here is unusual; the difficulty is almost always that the documents live with different people inside the organisation.
The complete set is compiled into a single bundle per entity and submitted together. If a group has several registered entities, each one registers separately with its own set.
The forms are the visible part of registration. What sits behind them is the documentation an inspector will actually ask for, and it is the part organisations underestimate. A licence with nothing behind it does not survive an inspection.
That list is the Starter package, $250, scoped for a small single site organisation. It carries the full statutory minimum, including the impact assessment that health or children’s data makes mandatory, so a small organisation is never pushed onto a larger package just to obtain one document.
Multi site organisations and higher record volumes need more: an expanded record of processing across departments and systems, a full impact assessment with legitimate interest and transfer assessments, third party data processing and sharing agreements, a prioritised remediation plan and a cross border transfer assessment. That is the Pro package. Groups, large enterprises and government ministries, departments and agencies take the Enterprise engagement, which adds a full audit, multi site rollout, board and all staff training and quarterly reviews.
Your licence tier is decided by the total number of individuals whose personal data you hold, counting staff, customers and partners together.
The $30 application fee applies from Tier 2 upwards. A Tier 1 organisation does not pay it, and it is not charged again on an annual renewal.
Every POTRAZ figure above is exclusive of VAT, which POTRAZ adds on its own invoice at a rate we do not set. That is why we quote our service fee and the POTRAZ fees as two separate numbers and never give you a single all-in total. You pay POTRAZ exactly what POTRAZ bills us, with no markup.
Almost every delay we see traces back to one of a handful of causes, and all of them are avoidable.
A submission that is disapproved has to be resubmitted as a complete new set, clearly marked as a resubmission. That is the strongest argument for assembling everything before anything is sent.
We complete the DP1 and the DP2, assemble every attachment, draft the compliance documents that sit behind the application, run the mandatory staff training and file the bundle with POTRAZ. You supply the company documents and the officer’s certificates, and confirm the record counts.
Every engagement begins with a $90 consultation, a one hour working session in which our data protection officers confirm your controller or processor status, map the records you hold, your sites and systems and the partners you share data with, and confirm your exact licence tier. The $90 is credited in full toward your compliance package when you proceed. Packages start at $250.
The licence fee itself becomes payable once your application is approved. It is a POTRAZ charge, passed through to you at cost.
Your certificate of incorporation or equivalent registration document, your entity particulars, your Data Protection Officer’s name, identity document and certificates, a completed Form DP1 licence application, a Form DP2 officer notification, your record volume and site count for tier confirmation, and from Tier 2 upwards proof of payment of the application fee.
Form DP1 is the Data Controller licence application, and it is also used for the annual renewal. It carries the entity’s certificate of incorporation. Form DP2 is the Data Protection Officer notification, which puts your officer on record with POTRAZ by name and carries their identity document and their educational and professional certificates or data protection officer certificate.
No. The $30 application fee applies from Tier 2 upwards. It is not charged at Tier 1, and it is not charged again on an annual renewal. The licence fee for your tier is separate and becomes payable once the application is approved.
No. Registration is per registered entity, so each company in a group files its own DP1 and DP2 with its own certificate of incorporation. The compliance documentation behind the applications can be built once and rolled out across the group, which is what the Enterprise engagement does.
The $90 consultation confirms your tier before anything is filed, by counting the individuals whose data you hold across staff, customers and partners. That is deliberate: you should never pay for a bigger licence than your organisation needs, and the tier also drives the rest of the quotation.
A $90 consultation begins any engagement and is credited toward your package if you proceed. Existing Lioncap Ventures clients save 10% on the service fee.
Contact Lioncap Ventures: email [email protected] or WhatsApp +263772724514.