A RERA-readiness checklist for Tanzanian housing associations

The Real Estate Regulatory Authority — RERA — was funded in Tanzania’s 2025/2026 national budget, with TZS 164.1 billion earmarked for the Ministry of Lands, Housing and Human Settlements Development. Its mandate, when it goes live, will cover three things that should make every body corporate sit up: structured market data collection, anti-money-laundering controls for property transactions, and standardised compliance reporting for managed residential estates.

If you sit on a committee in Dar es Salaam, Arusha, or Zanzibar, here is the practical checklist of what your body corporate needs to have in place before the first RERA audit cycle.

The twelve items

1. A current ownership register, digitally maintained. Every unit, every title deed reference, every current owner, every change of ownership in the last seven years. This is your single most important record. Without it, nothing else holds up.

2. A tenant register, scoped per unit. Who lives in each unit, with what tenancy term, paying what rent. RERA will care about occupancy data because it is the lever for AML and tax oversight.

3. Bank-account separation. The body corporate has its own bank account, in its own name, with mandate signatories that are the elected officers — not their personal accounts. If you are still running building money through the chairman’s NMB account, fix that first.

4. A TIPS-enabled merchant account. All inbound payments — service charges, sinking-fund contributions, late fees, fine recoveries — route through the body corporate’s TIPS merchant ID. No cash receipts. No personal mobile-money numbers.

5. Dual-signatory outgoing payments. Every payment over the by-law threshold (typically TZS 100,000) requires two signatures from two distinct officers. Same-person countersigning blocked at the operational layer.

6. Step-up MFA on financial actions. TOTP or hardware-key second factor for anyone who can move money, change roles, or export records. Stolen email passwords cannot drain the sinking fund.

7. Immutable audit log of every mutation. Every “who did what when” record stored in an append-only, tamper-evident log. Row-level checksums recommended. Monthly partitioning so the audit table does not become un-queryable.

8. AGM record archive, e-signed. Every AGM agenda, attendance sheet, resolution, vote count, and minute set, stored as a single signed artefact with timestamps. E-signed under the Electronic Transactions Act gives it legal weight.

9. By-law repository, version-controlled. Your block’s by-laws, the developer’s master deed, the committee’s adopted amendments, and the date each was ratified. Disputes get resolved against the version in force on the date of the incident.

10. Sinking-fund segregation. Reserves for major maintenance — roof, lift, generator, façade — held in a separate sub-account, with a published spend policy and a quarterly statement. RERA will want to see that you cannot accidentally spend the sinking fund on operating costs.

11. Vendor due-diligence records. Insurance certificates, trade licences, and tax compliance certificates on file for every contractor your body corporate engages. Refreshed annually. Auditable.

12. Certificate-of-clearance issuance log. Every clearance certificate the body corporate issues on a unit sale or refinance, with date, recipient, the arrears position at issuance, and the e-signed PDF. This is the document RERA will use to spot-check arrears compliance across the market.

What “ready” feels like

A body corporate that can pass a RERA audit in 2027 is a body corporate where, on any given day, an external auditor can be granted read-only access and reach a fully-supported conclusion in under two hours. Every record traceable. Every action attributable. Every payment reconcilable. Every minute signed.

You do not have to build all twelve items yourself. You do not have to certify your own TIPS merchant. You do not have to invent the audit log. You do have to make a clear decision in the next twelve months: are you running this building like the law of 2008 (and the regulator of 2027) requires, or are you running it like nobody is going to ask?

The committees that picked early get a quiet life. The ones that did not are about to discover that the auditor is coming, and the auditor brought a checklist.