Let's Talk Data Security

From policy to practice: Supporting Botswana’s data privacy journey

Written by Amy Botha | 14 November 2025
As data privacy continues to shape the way businesses operate across Africa, organisations in Botswana are stepping up to align with the country’s Data Protection Act 18 of 2024 (DPA). To support this journey, EPI-USE Labs recently hosted a roundtable event in Gaborone to bring together SAP professionals, compliance leaders, and data governance experts to share their insights into data privacy challenges and chat through practical solutions that can be applied to complex SAP environments.

As data privacy continues to shape the way businesses operate across Africa, organisations in Botswana are stepping up to align with the country’s Data Protection Act 18 of 2024 (DPA). To support this journey, EPI-USE Labs recently hosted a roundtable event in Gaborone to bring together SAP professionals, compliance leaders, and data governance experts to share their insights into data privacy challenges and chat through practical solutions that can be applied to complex SAP environments.

With interactive discussions, live demonstrations, and open forums led by Sanele Malwane, Regional Account Manager, Middle East & Africa (MEA), and James Watson, Head of EPI-USE Labs' Global Line of Business for Data Privacy solutions, the session created space for interactive dialogue that bridged the gap between DPA regulations on paper and day-to-day SAP operations.

The right time to host a data privacy roundtable in Botswana

Organisations are modernising their data landscapes while navigating a new wave of data privacy laws. For Botswana, the introduction of the Data Protection Act 18 of 2024 marks a major milestone in this journey. Many companies are now asking the question: how do we achieve compliance without disrupting daily operations or driving up costs?

"We hosted this roundtable to support organisations in Botswana as they navigate compliance with the country’s Data Protection Act. With data privacy regulations coming into sharper focus, many businesses are seeking practical guidance on how to achieve compliance – especially within SAP environments. Now was the right time because many organisations are reviewing data governance frameworks and looking for reliable solutions to manage personal and legacy data securely," said Sanele.

Making compliance achievable

One of the biggest takeaways from the event was that compliance doesn’t have to be complicated, it just needs the right foundation.

"We wanted attendees to leave with an understanding that compliance doesn’t have to be a burden if you have the right tools and strategies in place," said Sanele. "The EPI-USE Labs Data Privacy Suite and Data Secure solution provide the technical foundation for compliance, while Archive Central offers a cost-effective and secure way to manage historic and legacy data. Ultimately, the goal was to share that data privacy and system transformation can go hand in hand."

As the morning unfolded, it became clear that data privacy is more than a compliance checkbox, but rather a shared responsibility across industries.

"Seeing clients, partners, and industry professionals from across Botswana come together to discuss a shared challenge – data privacy – was incredibly rewarding,” reflected Sanele. “There was a genuine sense of collaboration and a shared commitment to doing things right when it comes to data protection."

Attendees were eager to unpack the practical implications of the DPA, especially how it affects employee and customer data within SAP systems. One discussion centred around how to balance data retention requirements with privacy obligations a challenge addressed by demonstrating how Archive Central enables businesses to maintain access to legacy data without breaching compliance rules.

Turning policy into practice

In many organisations, compliance feels like an abstract legal obligation. But as Sanele points out, events like this are crucial in bridging the gap between legislation and technology.

"Discussions about Botswana’s Data Protection Act are vital right now,” he said. “They help organisations translate legal obligations into actionable, system-based strategies. Compliance can often feel abstract, but when you demonstrate how our Data Privacy Suite, Data Secure, and Archive Central can be applied directly within SAP, it becomes tangible and achievable."

Through the discussions, several recurring themes emerged. Many companies are managing legacy systems, fragmented data, and uncertainty about how long to retain certain categories of information. Others voiced concerns about data exposure risks and the complexity of managing sensitive employee and customer data in hybrid SAP environments.

"We plan to host more targeted workshops and one-on-one sessions to help clients assess their current data landscapes and map out practical compliance roadmaps,” said Sanele. “We’re committed to deepening our engagement in Botswana and supporting clients throughout their data management and transformation journeys."

By building stronger local connections, EPI-USE Labs aims to empower organisations across Botswana with sustainable, SAP-integrated data privacy strategies.

Advice for those beginning their compliance journey

For organisations that couldn’t attend, James offers this advice:

"Start with an honest assessment of your current data environment – what data you hold, where it resides, and who has access to it. From there, identify the gaps against DPA requirements and explore solutions that can automate and secure these processes. Partnering with experienced solution providers like EPI-USE Labs can make this journey much smoother."

Start your journey with an SAP Data Privacy Assessment

If your organisation is running SAP, your compliance journey starts with understanding your data. That’s where the EPI-USE Labs SAP Data Privacy Assessment Service can help.

This service enables you to:

  • Identify and classify Personally Identifiable Information (PII) within your SAP systems
  • Assess data access risks and compliance gaps
  • Receive a complimentary high-level overview with a personal consultation from a data privacy expert

Then continue with a comprehensive assessment, which includes:

  • Data Discovery of your SAP Data Dictionary
  • Consulting and workshops with your technical and compliance teams
  • A detailed SAP Data Privacy and Risk Assessment report
  • Optional enhanced access risk analysis

Whether on-site or remote, the engagement typically spans five days over two weeks, giving you a clear, actionable roadmap for compliance. Learn more here.

Looking ahead

"What excites us most is the momentum," said Sanele. "There’s a real appetite for learning and collaboration in Botswana, and this event sparked meaningful conversations about modernising systems, improving data security, and ensuring compliance. We hope these discussions evolve into long-term partnerships that help organisations thrive in a data-driven and privacy-conscious world."