The Information Regulator may send you a POPIA enforcement notice after investigating you and finding that you have contravened POPIA by failing to lawfully process personal information. In comparison, the Information Regulator may send you an infringement notice if it [...]
If you are a marketer or brand activator who uses promotional competitions or prize draws to promote in South Africa, you need to comply with the Consumer Protection Act (CPA) requirements in section 36 and Regulation 11. We can help [...]
Loyalty programmes are everywhere - freebies, added benefits and loyalty schemes. Loyalty programmes, credits and schemes incentivise consumers to stay loyal to certain brands, retail outlets, airlines, banks, cellular providers and many other suppliers of goods and services. As [...]
All private bodies must submit a PAIA section 83(4) report (PAIA report) to the information regulator according to a notice the regulator published. The regulator has requested private bodies to submit this report annually in terms of section 83(4) [...]
RICA stands for the Regulation of Interception of Communications and Provision of Communication Related Information Act 70 of 2002, and finally came into effect on 30 September 2005. RICA is the piece of South African legislation that governs the interception [...]
Do you want to lodge a PAIA complaint or POPIA complaint with the Information Regulator in South Africa? Has someone failed to give you access to information or infringed on your privacy? In this article, we'll help you know how [...]
The monitoring of communications must be done lawfully. For example, employers often monitor employee communications (such as email, websites visited, telephone calls, and the use of AI tools) to gather the evidence required to dismiss an employee fairly. Companies [...]
The Consumer Protection Act is a South African law that protects consumers from harm. It also creates significant compliance obligations for most businesses in South Africa. Read the practical implications and take action. The Consumer Protection Act came into [...]
The Information Regulator is taking enforcement action against FT Rams Consulting for non-compliance with section 69 of POPIA - the section that deals with direct marketing. This FT Ram Consulting fine of R200k follows a complaint from a data subject […]
The Information Regulator was created by the Protection of Personal Information Act (POPI Act). POPI gives the Information Regulator teeth - it has extensive powers to investigate and fine responsible parties. Data subjects can complain to the Information Regulator, [...]
The Information Regulator argues that it is unlawful for the Department of Basic Education (DBE) to publish matric results in newspapers using a learner's exam number without consent. The regulator issued an enforcement notice to the DBE and then fined […]
For many, being GDPR certified or obtaining GDPR certification is the holy grail. It provides proof that you comply with the GDPR and other data protection laws. This is especially true for processors that process personal data on behalf [...]
