01
Compliance Assessment
Data Protection Compliance Assessments
A clear, practical review of how your organisation handles personal information, where it is exposed, and what readiness requires.
Learn more →Data Protection · Regulatory Affairs · Governance
Governance and compliance, led from experience.
Stein Columna advises organisations across Southern Africa on data protection, governance, regulatory affairs and pension law, bringing together two decades of legal practice, multi-jurisdictional Data Protection Officer experience, and board-level governance depth for institutions that need compliance to hold up in practice.
The urgency
Zambia's compliance deadline has passed, while the qualified expertise to respond remains scarce. Stein Columna exists to close that gap.
180+ Years
combined professional experience across leadership and boards
3 Jurisdictions
certified DPO capability held within the firm
20+ Years
at the Zambian Bar
Almost 9 Decades
combined legal practice across the Zambian and South African bars
The Moment
Zambia's data protection obligations are no longer coming. They are here.
The Data Protection Act No. 3 of 2021 placed mandatory obligations on every organisation that collects, stores, processes, or shares personal information - across every sector, public and private. The Commissioner's compliance deadline has passed.
Yet few organisations can demonstrate that they understand their obligations, and fewer still hold the systems and evidence to prove it. The shortage is not one of intention. It is one of qualified, practising expertise.
Stein Columna translates regulatory obligation into practical, defensible compliance, and builds the governance culture that sustains it.
What We Do
Guidance across the full compliance journey.
From a first assessment of your exposure to the long-term governance that keeps you compliant, we support organisations at every stage.
02
Governance Advisory
Privacy Governance Advisory
Governance structures that make responsibility for personal data visible, owned, and sustained at board level.
Learn more →03
Policy Development
Policy and Documentation Development
Policies, notices, controls, and records that turn legal obligation into daily practice - and into evidence.
Learn more →04
Regulatory Affairs
Regulatory Affairs
Interpretation of and response to regulatory requirements, turning complex obligations into practical implementation.
Learn more →05
Pension Governance
Pension Governance
Pension law and fund governance support for trustees, sponsors and administrators.
Learn more →06
Board Advisory
Board and Executive Advisory
Leadership-level advisory for organisations facing complex governance, compliance or regulatory decisions.
Learn more →07
Audit Readiness
Audit Readiness and Compliance Support
Prepare for scrutiny by making records, controls, responsibilities, and responses easy to demonstrate.
Learn more →08
Ongoing Advisory
Retainer Advisory
Senior guidance on call as your operations, technology, and regulatory exposure evolve.
Learn more →How We Deliver
One firm. A vetted bench of certified professionals.
Engagements are led by the firm and executed with a carefully selected network of trained and certified Data Protection Officers, drawn from Zambia and from international jurisdictions. This is deliberate design, not convenience. Clients engage Stein Columna; the standard does not change with the personnel.
How we deliver
Our Conviction
We treat personal data as what it is - a matter of human dignity.
Personal information belongs to people, and carries their dignity, autonomy, and safety with it. Shaped by our founder's years as a human rights advocate, that conviction is why we build compliance that protects people, not merely paperwork that protects appearances.
Leadership
Led by Grace Zulu
A Zambian advocate of over twenty years' standing, a certified Data Protection Officer in multiple Southern African jurisdictions, and the first African to receive the international Libby Slater Award. Grace served as practising Data Protection Officer for the MultiChoice Group across Zambia, Zimbabwe, and Eswatini.
“I have spent my career watching these regulations arrive across the region. The organisations that act now are the ones that will set the standard - not scramble to meet it.”Read Grace's full profile
Specialist Advisory
Specialist advisory, held to a clear standard.
Stein Columna Consulting Limited
Specialist advice for organisations navigating data protection, regulatory affairs, and governance.
Begin with a clear view of where you stand.
A compliance assessment shows exactly what is required, where the gaps are, and what must happen next.