The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]
The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]
The scope of application of PAIA is triggered when the conduct of a body (public or private) affects the rights of South Africans. Specifically, a body must comply with PAIA when a person may require access to the records it [...]
Welcome to the law in 2026! At the beginning of each year, we look ahead to help you prioritise your next steps. This is the law regarding digital, data and tech in 2026. We try to predict what will happen [...]
The Protection of Personal Information Act (POPI Act or POPIA) is South Africa's data protection law. The first question you need to ask is do you have to comply with it? Who must comply with POPIA? Who does the [...]
Many people are wondering whether they need an App EULA (or Application End User Licence Agreement) for the App (or application) they have developed (such as an iPhone App, Mac App, or iPad App). It might be an App for [...]
The final King V Code on corporate governance was published on 31 October 2025 by the Institute of Directors in Southern Africa (IoDSA). It is approximately 20 pages long and includes only the code (unlike previous versions, which also included [...]
The Lexing Network is expanding into Africa and is looking for new members for Lexing Africa. If you're a good fit, we'd love to hear from you. The Lexing Network is an international network of lawyers dedicated to data, digital [...]
AI literacy is essential to ensure people are competent and knowledgeable about AI. With some sections of the EU AI Act having taken effect on 2 February 2025, businesses and organisations should comply with a new requirement: ensuring the AI [...]
Did you receive an email from the Information Regulator with the title "Important Notice: Non-Compliance with PAIA Forms"? Don't panic; it doesn't necessarily mean that you are specifically non-compliant, and there are simple actions you can take to check whether [...]
In Digital Law Company v Meta, the High Court in South Africa (Gauteng Local Division Johannesburg) sanctioned a joint consent order in which Meta agreed to take a number of steps, including removing accounts, disclosing the subscriber information behind [...]
Today, the South African information regulator held a webinar called "Ask the Regulator". The purpose of the webinar was to allow participants to ask the regulator questions and for the regulator to encourage and support them in complying with POPIA […]
