In Mudau and Netshipise Attorneys v Information Officer for the CCMA, the Gauteng Local Division held that a public body's failure to respond to a PAIA request within the prescribed 30-day period constitutes a deemed refusal under Section 27 of […]
Sibanye-Stillwater enforcement action was taken by the Information Regulator, who issued a PAIA enforcement notice against the company on 22 May 2026 after Sibanye refused access to its Social and Labour Plan (SLP) compliance reports. The Information Regulator found that […]
The Gauteng Department of Health enforcement action issued by the Information Regulator on 8 June 2026, directs the Department to disclose records requested by the Complainant under PAIA. The records relate to the investigation of the assassination of Babita Deokaran. […]
The Central Johannesburg TVET College enforcement action confirms that the Information Regulator will act when POPIA conditions are not met. On 22 May 2026, the Regulator issued its first formal enforcement notice of the year, following complaints lodged by employees [...]
The NCC opt-out registry is a crisis for marketers. The new direct marketing regulations under the CPA may be one of the most burdensome compliance obligations marketers will face in years. Marketers must register, pay ongoing fees and opt people [...]
In Eskom v AfriForum, the Supreme Court of Appeal dismissed Eskom’s appeal and ordered it to disclose its coal and diesel contracts to AfriForum. The Court confirmed that under the Promotion of Access to Information Act 2 of 2000, access […]
Standard Bank, Africa’s largest bank, has disclosed a data breach affecting a number of its clients. This raises concerns about rising cybersecurity risks across South Africa’s financial sector. Standard Bank directly communicated with their clients and confirmed that someone had […]
Direct marketing is under scrutiny as South Africa’s Information Regulator takes enforcement action against OUTsurance following an investigation into its direct live-call marketing practices. The case could become a landmark test of whether live telephone calls fall under section 69 […]
The Liquid Telecom enforcement action regarding recording meeting without consent arises from a decision where Kenya’s data protection regulator fined Liquid Telecommunications Kenya 700,000 Kenyan Shillings for unlawfully recording and retaining a former executive's Zoom meeting without consent. The ruling […]
PSiRA may expand its regulation of cybersecurity services in South Africa. What would this mean for cybersecurity service providers? How do you, as a cybersecurity service provider, feel about being regulated by the Private Security Industry Regulatory Authority (PSiRA)? PSiRA, [...]
In Zulu Nyala Game Ranch v Christiaan Beukes, the High Court interdicted and ordered a former employee (Beukes) who used their employer's (Zulu Nyala Game Ranch) confidential customer database to start a competing business to stop using and delete it. […]
In August 2025, South Africa’s Information Regulator issued an enforcement notice against the Kudung Communal Property Association (Kudung CPA) for failing to provide access to requested records under the Promotion of Access to Information Act (PAIA). After Kudung CPA ignored […]
