The Quickloan privacy violation marks a significant milestone for data protection enforcement in Uganda, demonstrating that non-compliance carries real consequences. In July 2025, Uganda's Personal Data Protection Office (PDPO) secured its first-ever criminal conviction under the Data Protection and Privacy [...]
The Northbound Processing v SA Diamond Regulator case highlights the risks of citing AI-generated case law in South African courts. It concerns the urgent release of a refining licence linked to a disputed business sale and highlights the consequences of [...]
Zimbabwe’s Cyber and Data Protection Act clearly sets out how organisations must collect, use, and protect personal information. Alongside the Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, it forms a comprehensive legal [...]
The 23andMe data breach exposed highly sensitive personal and genetic information. Canadian and UK regulators found that 23andMe failed to implement adequate security measures and violated their respective data protection laws. This breach highlights how poor security and slow response [...]
Katiba v Tools for Humanity and others is Kenya's landmark High Court decision on biometric privacy. Worldcoin-linked entities violated Kenya's Data Protection Act by collecting iris and facial scans in exchange for cryptocurrency. The court halted the project and ordered [...]
The European Commission (EU Commission) has published a proposal for a GDPR record-keeping exemption for SMEs and small mid-cap companies (SMCs) as part of its Omnibus IV Simplification Package. If adopted, this amendment to Article 30(5) of the GDPR could [...]
The POPIA Amendment Regulations commenced with immediate effect on 17 April 2025. These amended regulations cover new proposed rules of procedure, administrative fines, and expand the data subject's rights to their personal information. In this post, we summarise the regulations, [...]
Construction Education and Training Authority (CETA) v V2 Digital and Another case centres on data migration disputes and POPIA's provisions relating to data governance, after CETA terminated its ICT service agreement with V2 Digital. Who should care about this judgment [...]
Help develop South Africa's AI Policy Framework by contributing your input. The Department of Communications and Digital Technologies (DCDT) has called upon the public and stakeholders to provide its comments on the recently published South African AI Policy Framework. [...]
Munetsi v Madhuyu and Another involves the disclosure of personal information on social media without consent. The applicant sued the respondents to stop sharing his personal information online. He also requested a public apology and punitive costs. The court ordered [...]
Authors Guild sues OpenAI and Microsoft for copyright infringement for using seventeen authors' works to train their AI-based models. Who should care about this case and why? The Authors Guild sues Open AI in a class action. This is a [...]
Many organisations are overcoming the hurdles of implementing AI and experimenting with various AI application offerings. These organisations are mainly large and capital heavy, leaving small and medium enterprises behind. But do not worry -Â the implementation and use of [...]
