If a complainant lodges a complaint against you for infringing their privacy rights, the information regulator can issue any one of a few types of notices to you. For example, you could receive an information notice, an enforcement notice, or [...]
Almost certainly not. If you receive an email telling you that your brand or trademark is being registered in China, it is almost certainly a hoax or a scam. The Chinese domain name scam changes over time but is [...]
You should map activities (rather than information, data flows, or processes) as a first step toward complying with data protection laws (such as the GDPR and the Protection of Personal Information Act (POPI Act)). The law requires larger organisations to […]
What do the JSE listing requirements say about the King Code? Is the King Code part of the requirements? Do listed companies have to comply with the King Code principles? Have the JSE listing requirements changed since the last King [...]
The law treats a private body differently from a public body, so it is essential that you know the difference. Some laws (like POPIA and PAIA) require private bodies to do specific things (like submit a PAIA report). You can [...]
On 30 April 2026, the Information Regulator published the draft Gated Access Code of Conduct under POPIA. It applies to owners, managers, and their security and technology service providers at any gated premises, including residential estates and office parks. The [...]
Does POPIA apply to journalists? If POPIA does not apply to you, what must you consider when processing personal information? These are two important questions to ask if you are a journalist who has concerns about the personal information you [...]
The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]
The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]
The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]
The scope of application of PAIA is triggered when the conduct of a body (public or private) affects the rights of South Africans. Specifically, a body must comply with PAIA when a person may require access to the records it [...]
Welcome to the law in 2026! At the beginning of each year, we look ahead to help you prioritise your next steps. This is the law regarding digital, data and tech in 2026. We try to predict what will happen [...]
