The Adequacy and Appropriateness of the Legal Framework Governing Internet of Things and Internet of Beings in Zambia

Abstract

This study examines the adequacy and appropriateness of Zambia’s legal framework governing the Internet of Things (IoT) and the Internet of Beings (IoB). These emerging technologies connect devices and even living beings, creating new opportunities for innovation but also serious legal and ethical challenges. While Zambia has enacted the Data Protection Act of 2021 and the Cyber Security Act, these laws do not adequately address the unique risks that IoT and IoB present, such as violations of privacy, dignity, and bodily autonomy. The research finds that Zambia’s current legal framework protects traditional rights but lacks clear rules on the collection, use, and sharing of sensitive biological and neurological data. Through a comparative analysis, the study draws lessons from the United Kingdom and Kenya, both of which have developed stronger systems for regulating data protection and digital technologies. The UK’s Product Security and Telecommunications Infrastructure Act 2022 and Kenya’s Data Protection Act 2019 demonstrate how privacy-by-design and active enforcement can safeguard citizens in the digital age. The findings reveal that Zambia needs to strengthen its laws to include explicit protection for biological and mental data, define key terms like “personal use” and “legitimate interest,” and empower enforcement agencies. The study concludes that without these reforms, IoT and IoB technologies could threaten constitutional rights such as privacy, dignity, and freedom of thought. It recommends legal amendments, stronger oversight institutions, and clear penalties to ensure technology serves people without undermining their rights.