Tanzania’s new social media tax rule for businesses sparks privacy and cybersecurity fears

Dar es Salaam. Online traders and digital creators have raised concerns over privacy and cybersecurity risks arising from a new government requirement that businesses operating through social media display tax information on their profiles.

The concerns emerged after the government passed a regulation requiring anyone conducting business on social media to display either a TIN, a Tax Clearance Certificate or a Certificate of Registration on their social media profile or account.

According to the Tax Administration (General) (Amendment) Regulations, 2026, which came into operation on July 1, 2026, the information is required to be displayed in a manner that is easily visible.

However, digital creators and online entrepreneurs have questioned whether publicly displaying tax credentials is the most appropriate way to achieve the government’s objective, given the potential risks associated with exposing personal and business information online.

According to digital creator Wilson Nkya argued that a TIN is normally presented directly to a specific institution, such as a bank or local government authority, depending on the purpose of the transaction, and should not necessarily be made publicly accessible online. “If someone has access to my TIN certificate, they may be able to trace other information linked to me, including records connected to my taxpayer portal or other personal documents. The concern is that the information could be used against me,” he told The Citizen.

He added that many digital creators intentionally operate under online identities that differ from their legal names in order to protect their private lives and family members.

“Once someone has access to a creator’s TIN or legal identity, it becomes much easier to trace family members and other personal information that the creator intended to keep private,” he said.

Mr Nkya suggested that, instead of requiring personal tax information to be displayed publicly, the government should work with social media platforms to establish a secure verification mechanism for online businesses.

Another digital creator, Agness Masaiti, said the regulation had both advantages and disadvantages.

On the positive side, she argued that it could help distinguish legitimate businesses from fraudulent accounts used to deceive customers online.

“Customers may gain confidence when they see that a business has official tax information and is recognised by the government. It could also increase trust and accountability,” she said. However, she maintained that a TIN is sensitive information and should not be treated as something suitable for public display on a social media profile.

“A social media bio is primarily a space for branding and visibility. Displaying a TIN number there does not seem appropriate,” she said.

Ms Masaiti urged authorities to explore alternative approaches that would achieve the objective of regulating online businesses without increasing the risk of personal data exposure.

Online entrepreneur Melissa Fredrick also questioned the requirement, saying that displaying tax information in a public online environment is fundamentally different from presenting documents in a private office setting.

“In an office, someone would have to physically access the document, but online the information can be copied and misused without the owner even knowing,” she said.

She acknowledged that the regulation could help authorities identify and regulate online businesses more effectively, but insisted that the broader implications for data security should be carefully considered.

“I understand that the government wants to create a better system for online businesses, but these are sensitive details that can be exploited if they fall into the wrong hands,” she added.

Technology enthusiast Jumanne Khatibu also questioned the requirement, saying that while displaying a business certificate might be acceptable, publishing a TIN number publicly could pose unnecessary risks.

He warned that cybercriminals could potentially use such documents and personal details to submit fraudulent tenders or enter into illegal contracts under another person’s identity.

“We know there are people who constantly look for opportunities to exploit other people’s mistakes. Publicly available personal tax information could become another opportunity for cybercrime,” he said.

Mr Khatibu argued that businesses are already registered with the TRA and therefore do not need to make all tax information publicly available.

He suggested that businesses could indicate on their social media profiles that they are fully registered and tax-compliant, while making official Tax Clearance Certificates available upon request through a secure, direct verification channel for customers, business partners or regulatory authorities.

Such an approach, he argued, would allow the government to maintain oversight of online businesses while reducing the amount of sensitive tax information exposed to the public.