Zimbabwe is drafting a new law to police social media, layering it on top of one of Southern Africa's most centralised surveillance regimes. In April 2026, President Emmerson Mnangagwa said "policies and mechanisms to guarantee ethical and responsible use of ICTs and various media platforms are being accordingly reviewed," citing "the increasing abuse of social media by some unscrupulous persons and groups." Information Minister Jenfan Muswere has framed the bill as a fix for "ghost accounts" and anonymous "cashvists" who "hide behind anonymity to demonize our country," promising "stricter accountability mechanisms for social media users and content distributors." Separately, ICT Minister Tatenda Mavetera floated a Child Online Protection Policy in March 2026 that could bar under-18s from social platforms — a move that would make Zimbabwe the first African state to attempt such a ban.
The case the government is making
The regulators are not arguing in a vacuum. Disinformation is a real governance problem, AI-generated deepfakes are a genuine and fast-moving threat, and the viral circulation of graphic content — Mnangagwa pointed specifically to traffic-accident footage — inflicts real harm on real families. On World Press Freedom Day 2026, the government warned of "fake news, disinformation, and deepfakes." Child-safety advocates worldwide, from Australia's under-16 restrictions to the EU's age-assurance pilots, are wrestling with the same questions Harare claims to be answering. A state that ignored online fraud, non-consensual imagery, and coordinated manipulation would be failing its citizens. On its face, "responsible use" of platforms is a legitimate public-policy aim.
The problem is the architecture it plugs into
The difficulty is not the goal but the machinery. Zimbabwe already has the Cyber and Data Protection Act [Chapter 12:07] (No. 5 of 2021), gazetted on 11 March 2022, which criminalises the transmission of false data messages and obliges intermediaries to remove unlawful content — with penalties reaching Z$200,000 and up to two years' imprisonment for non-compliance, per Freedom House's Freedom on the Net 2024 report. Sitting beneath that is the Interception of Communications Act (2007), which, as CIPESA documents, requires every telecoms provider to build infrastructure "capable of rendering real time and full-time monitoring" of communications, and routes interception warrants through a monitoring centre under the Office of the President.
In other words, the state can already compel takedowns, prosecute "false" speech, and intercept communications through an executive-controlled hub. A new social media law does not fill a gap — it adds a redundant layer to an already-expansive toolkit. MISA Zimbabwe made exactly this point in March 2025, warning that the proposal "poses a risk of creating a digital environment in which citizens fear expressing their views," duplicates the existing Cyber Act, and leans on "vague provisions, particularly those criminalising 'false' information without clear definitions."
Why vagueness plus surveillance is disproportionate
Proportionate regulation targets a specific harm with the least restrictive means and independent oversight. Zimbabwe's emerging model inverts that test. Criminalising undefined "false" information hands officials discretion to decide what counts as a lie — a power that, in practice, has fallen on critics rather than fraudsters. Freedom House scored Zimbabwe 48 out of 100 in 2024, classifying it "Partly Free" and noting a decline from 51 the prior year, with a government "cyber-team" for social media monitoring announced in November 2021. The country's recent record — including the prolonged 2025 detention of journalist Blessed Mhlanga and repeated arrests of commentators such as Hopewell Chin'ono — shows how elastic "abuse" and "national interest" language becomes once enforcement is centralised and judicial review is thin.
The child-protection framing deserves the same scrutiny. An under-18 platform ban requires identity or age verification, which in turn requires collecting more personal data from every user — pushing the entire population toward the kind of always-on monitoring the surveillance statutes already enable. Digital-rights groups reasonably warn this functions as a Trojan horse: build the verification rail for children, and you have built it for everyone. And the ban is unlikely to work on its own terms — minors route around restrictions through VPNs and borrowed credentials, so the predictable result is more surveillance infrastructure with little protective payoff.
The cost to Zimbabwe's digital economy
There is also an innovation price. Zimbabwe is courting investment under its Vision 2030 agenda, and Africa's digital momentum — from fintech to streaming — runs on user trust and predictable rules. Heavy intermediary-liability exposure and ambiguous speech offences raise compliance risk for the local startups and global platforms a growing economy needs. When the regional precedents a government cites are Tanzania and Rwanda — jurisdictions criticised for weaponising content rules against independent voices — investors read it as a signal, not reassurance.
A more proportionate path
None of this means doing nothing. A better package would: define online harms narrowly and concretely (fraud, incitement, non-consensual imagery) rather than policing "falsity"; require judicial warrants and published transparency reports for any interception or takedown; pursue platform-accountability and notice-and-action mechanisms instead of user criminalisation; and meet the child-safety goal through digital-literacy programmes and design standards rather than blanket bans and population-wide age checks. Zimbabwe does not need a new surveillance layer. It needs narrower laws, real oversight, and the confidence that an open internet is an economic asset — not a threat to be managed.