Lesson 1.4: SSP Self-Registration

SSP Self-Registration is how a Zimbabwean taxpayer enrolls in TaRMS without ZIMRA intervention. This lesson takes you through the self-service registration flow.

Lessons 1.1 and 1.2 assumed the learner already had an SSP login. Lesson 1.4 closes that assumption: it teaches the very first step any new SSP user must complete — creating their personal SSP account through the self-registration workflow at mytaxselfservice.zimra.co.zw.

This lesson is short but indispensable. Without a registered SSP account, none of the other 43 lessons in this course are accessible to the learner. The lesson covers the registration form fields, the email-OTP verification cycle, the password rules at registration, and the immediate post-registration steps that wire the new account into the assignee structure of any taxpayer the user represents.

Two audiences need this lesson most. First, the new individual taxpayer who has just received their TIN and is logging in for the first time. Second, the new staff member at a tax-agent firm or corporate finance team whose Tax Manager has asked them to "create your own SSP login so I can add you as an assignee" (Lesson 3.4) — this is the lesson that shows them how.

1. Section 34B Revenue Authority Act — the prescribed channel for first contact

The same provision that prescribes the SSP as the channel for filing also prescribes self-registration as the way to enrol new users. There is no parallel paper enrolment route except in narrow walk-in cases.

2. ZIMRA Public Notice on TaRMS Migration (October 2023)

Mandates per-individual SSP accounts. Treats credential-sharing as a Cyber and Data Protection Act offence (sections 7 and 16).

3. Cyber and Data Protection Act [Chapter 12:07]

Personal data captured at registration (national ID, email, mobile) is personal data within section 3. ZIMRA, as data controller, owes section 7 duties of secure handling. The user, on accepting the SSP Terms of Use, becomes a data subject who has consented to specific processing for tax-administration purposes.

4. The Constitution of Zimbabwe, section 56 — equality

The right to equal treatment underwrites ZIMRA’s assisted-registration practice at walk-in stations for taxpayers without internet access.

5. SSP Terms of Use (administrative-law instrument)

Accepted on first registration. Bind the user to: credential personal-non-transferable, responsibility for acts done through credential, breach-notification within 24 hours.

1. The two registration paths

2. The self-registration workflow

1. Open https://mytaxselfservice.zimra.co.zw.
2. Click Register below the login form.
3. Complete the registration form: National ID number, surname, first name, date of birth, gender, email address, mobile number.
4. Choose a password meeting the rules (8+ chars, mixed case, digit, special; expiry 90 days).
5. Tick the SSP Terms of Use acceptance box.
6. Submit. The system sends an OTP to the registered email.
7. Enter the OTP within its 10-minute validity to confirm the email.
8. The account is created and immediately usable for login.

3. The TIN linkage

The SSP account is initially linked only to the natural-person identity (national ID). To act on a taxpayer’s TIN, one of three things must happen:

• ZIMRA links the user’s ID to a TIN already on record
• the user is added as an Assignee on a TIN by that TIN’s holder (Lesson 3.4)
• the user submits a first-time taxpayer-registration application themselves (Lesson 2.5) and becomes the holder of their own TIN.

4. Field-by-field guidance

5. The OTP verification cycle

The email OTP is the single point of failure in registration. If the email is mistyped, the OTP cannot be retrieved and the registration cannot complete. Best practice: type the email carefully, send a test message to it before starting registration, and have the email client open in a separate tab for fast OTP retrieval.

6. Post-registration immediate steps

• Log in to confirm the credentials work.
• Visit the User Profile (Lesson 1.6) to confirm the data captured.
• If you are joining a firm or corporate as an Assignee, share your national ID with the Tax Manager so they can add you (Lesson 3.4).
• If you are registering as a taxpayer in your own right, proceed to Lesson 2.5.

1. The new graduate hire at an accounting firm

A graduate joins a tax-agent firm. On day one, HR sends a welcome email asking them to create their personal SSP account before lunch. The graduate completes self-registration in under five minutes; sends their national ID to the Tax Manager; the Tax Manager adds them as an Assignee on the firm’s licence (Lesson 3.4); by mid-afternoon they are working on their first client return.

2. The new corporate Public Officer

A newly-appointed Public Officer of a Zimbabwean subsidiary registers their personal SSP account; the previous Public Officer formally transfers the role through the Form REV 2 / Change of Authorised Persons workflow; the new Public Officer’s SSP account becomes the operative channel for ZIMRA correspondence.

3. The first-time taxpayer (e.g., new sole trader Lily)

Lily registers her SSP account; subsequently lodges a taxpayer-registration application (Lesson 2.5) which generates her TIN. The TIN is linked to her SSP account automatically because she lodged the application as the natural-person applicant.

4. The migration case

An emigrating Zimbabwean retains their SSP account even after leaving the country. The account does not auto-deregister on emigration; the user remains responsible for any tax obligations that survive their move (e.g., Zimbabwean-source income).

1. Identity-verification disputes

Where an SSP registration is later contested (e.g., a third party alleges the registration was made fraudulently in their name), ZIMRA’s practice is to suspend the account pending investigation. A 2024 unreported case at the Magistrates’ Court (Harare) involved an identity-theft registration that was suspended within 48 hours of the affected party’s complaint.

2. The Cyber Act dimension

Section 16 of the Cyber and Data Protection Act criminalises unauthorised access. Registering an SSP account using another person’s national ID is a section 16 offence even where no further misuse occurs.

3. The Terms of Use as administrative contract

The SSP Terms of Use, while not strictly a private-law contract, are treated by ZIMRA as binding through administrative-law principles. Mr A v. SARS (2020, persuasive) is the closest analogy: the user’s acceptance of the prescribed channel binds them to the channel’s terms.

1. Mistyped email at registration

OTP cannot be retrieved; the registration cannot complete. Fix: double-check before submission; consider sending a test email first.

2. Using a shared firm email

Multiple users with the same email cannot all be the same SSP account. Fix: personal email per user.

3. Choosing a weak or memorable password

Repeatedly guessable passwords trigger lockouts and are easily compromised. Fix: use a password manager; choose a diceware passphrase.

4. Skipping the Terms of Use

Cannot complete registration without acceptance, but users sometimes try to "skip" by closing and reopening. Fix: read and accept; the Terms are administrative-law binding.

5. Registering before having a national ID

The system rejects registrations without a valid Zimbabwean national ID. Fix: obtain national ID first.

6. Forgetting to verify email immediately

The OTP expires in 10 minutes; users who delay must restart the registration. Fix: have email open before submitting.

Question 1

List the eight steps of the SSP self-registration workflow.

Question 2

Distinguish self-registration from assisted registration. When would each be appropriate?

Question 3 — Scenario

A graduate joins an accounting firm. Walk through the day-one onboarding from a TaRMS perspective.

Question 4

What is the legal status of the SSP Terms of Use, and why does it matter?

Answer 1

Open SSP URL → click Register → complete form → choose password → accept Terms → submit → enter OTP from email → account created.

Answer 2

Self-registration:

• individual completes the form themselves
• appropriate when they have internet access and a valid national ID. Assisted registration: ZIMRA officer at a station completes the form on behalf of the user
• appropriate for those without internet, or where ID-document complications need an officer&rsquo
• s judgement

Answer 3

1. Graduate registers their personal SSP account using their national ID and personal email.
2. Sends national ID to Tax Manager.
3. Tax Manager adds graduate as an Assignee on the firm’s Tax Agent licence with the appropriate Role (Returns Clerk, Lesson 3.4).
4. Graduate logs in and sees the firm’s client TINs in the top-right TIN selector.
5. Graduate begins client work with the TIN-switch verification habit (Lesson 1.2).

Answer 4

The Terms of Use are administrative-law binding (not strictly private contract). They prescribe credential personal-non-transferable, user responsibility for credential use, and 24-hour breach notification. They matter because they translate the statutory framework (section 34B RAA, section 80 ITA, Cyber Act) into specific user obligations enforceable by ZIMRA.

☑ One SSP account per natural person; per Public Notice on TaRMS Migration.

☑ Eight-step self-registration; OTP from email is the linchpin.

☑ Personal email and personal mobile, not shared firm channels.

☑ SSP Terms of Use are administrative-law binding.

☑ Post-registration: link to TIN via Lesson 3.4 (Assignee) or Lesson 2.5 (own TIN).

☑ Identity-fraud registrations are section 16 Cyber Act offences.

☑ Continuity: Lesson 1.5 covers password lifecycle (reset, change, lockout recovery).

──────────

TaxTami — Zimbabwe Tax Training

www.taxtami.com · info@taxtami.com