Rules or Regulations on the processing of Health Information under POPIA 2026
Unlock exclusive content, join a Michalsons Programme! Members should log in to access this content. If you're not a member then join a Michalsons programme.
Guidance Note on Conducting a Personal Information Impact Assessment
The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]
Guidance note on Transborder Flows of Information under POPIA
The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]
When must I comply with PAIA? PAIA scope of application
The scope of application of PAIA is triggered when the conduct of a body (public or private) affects the rights of South Africans. Specifically, a body must comply with PAIA when a person may require access to the records it [...]
The law in 2026 – our predictions
Welcome to the law in 2026! At the beginning of each year, we look ahead to help you prioritise your next steps. This is the law regarding digital, data and tech in 2026. We try to predict what will happen [...]
Must I comply with the POPI Act?
The Protection of Personal Information Act (POPI Act or POPIA) is South Africa's data protection law. The first question you need to ask is do you have to comply with it? Who must comply with POPIA? Who does the [...]
Do I need an App EULA or App Terms of Use?
Many people are wondering whether they need an App EULA (or Application End User Licence Agreement) for the App (or application) they have developed (such as an iPhone App, Mac App, or iPad App). It might be an App for [...]
King V Code published for application
The final King V Code on corporate governance was published on 31 October 2025 by the Institute of Directors in Southern Africa (IoDSA). It is approximately 20 pages long and includes only the code (unlike previous versions, which also included [...]
Lexing Network is expanding into Africa | Join Lexing Africa
The Lexing Network is expanding into Africa and is looking for new members for Lexing Africa. If you're a good fit, we'd love to hear from you. The Lexing Network is an international network of lawyers dedicated to data, digital [...]
AI literacy is required by the EU AI Act
AI literacy is essential to ensure people are competent and knowledgeable about AI. With some sections of the EU AI Act having taken effect on 2 February 2025, businesses and organisations should comply with a new requirement: ensuring the AI [...]
Important Notice: Non-Compliance with PAIA Forms
Did you receive an email from the Information Regulator with the title "Important Notice: Non-Compliance with PAIA Forms"? Don't panic; it doesn't necessarily mean that you are specifically non-compliant, and there are simple actions you can take to check whether [...]
Digital Law Company v Meta | Extraterritorial application of South African law
In Digital Law Company v Meta, the High Court in South Africa (Gauteng Local Division Johannesburg) sanctioned a joint consent order in which Meta agreed to take a number of steps, including removing accounts, disclosing the subscriber information behind [...]