Tayla Pinto

Home/Tayla Pinto

About Tayla Pinto

Tayla is a public law turned tech law enthusiast with a special interest in the governance and use of emerging technologies. She combines her research experience and understanding of the tech and legal tech landscape to deliver legal solutions that are accessible, empowering and helpful.Read more ...

AI vendor impact assessment manages risk

As organisations increasingly adopt artificial intelligence (AI) systems, many turn to external providers to supply these tools. But using third-party AI without proper due diligence can expose you to serious legal, ethical, and operational risks. An AI vendor impact assessment [...]

By |2025-05-26T12:17:56+02:00May 20th, 2025|Categories: AI Law|Tags: , , , , |

Personal Information Impact Assessments under POPIA

A Personal Information Impact Assessment (PIIA) under POPIA is a process that helps organisations understand and minimise the data protection risks of processing personal information. Under South Africa’s Protection of Personal Information Act, 4 of 2013 (POPIA), a PIIA supports [...]

By |2025-05-06T12:53:11+02:00April 30th, 2025|Categories: POPI and Data Protection|Tags: , |

WhatsApp enforcement action | POPIA breaches

South Africa’s Information Regulator has issued a formal enforcement notice against WhatsApp for failing to comply with the Protection of Personal Information Act (POPIA).This marks a significant step in enforcing South Africa’s data protection laws and signals that the Regulator [...]

Kenya’s National Artificial Intelligence Strategy

The Ministry of Information, Communications, and the Digital Economy has launched Kenya's National Artificial Intelligence Strategy for 2025-2030. This strategy sets out Kenya's plan to integrate AI into its economy and society through three main pillars and four supporting pillars. [...]

By |2025-03-31T21:31:59+02:00March 31st, 2025|Categories: AI Law|Tags: |

AI Agents and agentic AI: What’s the difference and who’s liable?

As artificial intelligence systems become increasingly embedded in both consumer and enterprise software, we need to understand a critical distinction between AI agents and agentic AI. These terms are often used interchangeably, but from a legal, technical, and operational standpoint, [...]

By |2025-03-31T16:00:47+02:00March 31st, 2025|Categories: AI Law|Tags: |

Mavundla v MEC: Department of Co-Operative Government and Traditional Affairs KwaZulu-Natal | GenAI

In Mavundla v MEC: Department of Co-Operative Government and Traditional Affairs KwaZulu-Natal, the Pietermaritzburg High Court dealt with the consequences of legal practitioners submitting false case citations, most likely generated by artificial intelligence (AI), in their court filings. Who should [...]

By |2025-04-09T11:47:14+02:00March 31st, 2025|Categories: AI Law, Life@Law|Tags: , , , , |

DeepSeek banned over privacy concerns

DeepSeek, a Chinese artificial intelligence (AI) chatbot, faces bans and suspensions worldwide due to serious privacy and security concerns. Governments and regulators have flagged the chatbot’s data practices - raising alarms over potential national security risks and non-compliance with data [...]

By |2025-02-26T13:59:06+02:00February 26th, 2025|Categories: AI Law|Tags: , |

Information security vs cyber security: What’s the difference?

Information Security vs Cyber Security - what’s the Difference? Information security and cybersecurity are not separate concepts—they are the same discipline applied in different eras. Information security existed long before digital technology, focusing on protecting physical records and sensitive information. [...]

By |2025-03-18T22:04:31+02:00February 26th, 2025|Categories: Cybersecurity Law, Uncategorised|Tags: , , |

CPA amendments: What they could mean for direct marketing

The Department of Trade, Industry, and Competition (DTIC) plans to make CPA amendments to the Consumer Protection Act (CPA) regulations. These CPA regulation amendments aim to address direct marketing practices in South Africa by introducing a National government-run opt-out registry [...]

By |2025-02-25T16:32:39+02:00February 21st, 2025|Categories: Marketing Law, POPI and Data Protection|Tags: , , |

How POPIA affects AI

Artificial intelligence is transforming industries, but South Africa’s Protection of Personal Information Act (POPIA) sets clear rules for AI systems that process personal data. Businesses and organisations using AI must follow POPIA’s data protection principles to avoid legal risks and [...]

By |2025-01-31T17:14:00+02:00January 31st, 2025|Categories: POPI and Data Protection|Tags: , , |

Matric results leak | Data breach

The recent matric results leak has raised serious concerns about data security and unauthorised access to student information. The breach, involving the early release of National Senior Certificate (NSC) results, has led to a criminal investigation and regulatory intervention. Here’s [...]

By |2025-01-31T11:35:22+02:00January 31st, 2025|Categories: POPI and Data Protection|Tags: , |