The Ayinde v London Borough of Haringey judgment highlights the risks of using generative AI for legal research. It shows why lawyers must apply proper judgment. The English High Court considered matters in which lawyers had submitted AI-generated hallucinations to […]
Information Regulator ramps up enforcement: on 1 September 2026, the Information Regulator briefed the public and media on its latest enforcement and compliance activities under POPIA and PAIA. The briefing shows the Regulator increasingly concerned about South Africa's cybersecurity environment. [...]
In Mashashane v SABC, the Gauteng Local Division considered an urgent application under the Promotion of Access to Information Act 2 of 2000 (PAIA). Mashashane, the applicant, sought to compel the SABC to disclose a copy of an old Speak […]
In Mudau and Netshipise Attorneys v Information Officer for the CCMA, the Gauteng Local Division held that a public body's failure to respond to a PAIA request within the prescribed 30-day period constitutes a deemed refusal under Section 27 of […]
Sibanye-Stillwater enforcement action was taken by the Information Regulator, who issued a PAIA enforcement notice against the company on 22 May 2026 after Sibanye refused access to its Social and Labour Plan (SLP) compliance reports. The Information Regulator found that […]
The Gauteng Department of Health enforcement action issued by the Information Regulator on 8 June 2026, directs the Department to disclose records requested by the Complainant under PAIA. The records relate to the investigation of the assassination of Babita Deokaran. […]
The Central Johannesburg TVET College enforcement action confirms that the Information Regulator will act when POPIA conditions are not met. On 22 May 2026, the Regulator issued its first formal enforcement notice of the year, following complaints lodged by employees [...]
The NCC opt-out registry is a crisis for marketers. The new direct marketing regulations under the CPA may be one of the most burdensome compliance obligations marketers will face in years. Marketers must register, pay ongoing fees and opt people [...]
In Eskom v AfriForum, the Supreme Court of Appeal dismissed Eskom’s appeal and ordered it to disclose its coal and diesel contracts to AfriForum. The Court confirmed that under the Promotion of Access to Information Act 2 of 2000, access […]
Standard Bank, Africa’s largest bank, has disclosed a data breach affecting a number of its clients. This raises concerns about rising cybersecurity risks across South Africa’s financial sector. Standard Bank directly communicated with their clients and confirmed that someone had […]
Direct marketing is under scrutiny as South Africa’s Information Regulator takes enforcement action against OUTsurance following an investigation into its direct live-call marketing practices. The case could become a landmark test of whether live telephone calls fall under section 69 […]
The Liquid Telecom enforcement action regarding recording meeting without consent arises from a decision where Kenya’s data protection regulator fined Liquid Telecommunications Kenya 700,000 Kenyan Shillings for unlawfully recording and retaining a former executive's Zoom meeting without consent. The ruling […]
