Information law or data law is a specialist field of legal practice looking at all laws that regulate specifically information or data.
You should map activities (rather than information, data flows, or processes) as a first step toward complying with data protection laws (such as the GDPR and the Protection of Personal Information Act (POPI Act)). The law requires larger organisations to […]
The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]
The final King V Code on corporate governance was published on 31 October 2025 by the Institute of Directors in Southern Africa (IoDSA). It is approximately 20 pages long and includes only the code (unlike previous versions, which also included [...]
For many, being GDPR certified or obtaining GDPR certification is the holy grail. It provides proof that you comply with the GDPR and other data protection laws. This is especially true for processors that process personal data on behalf [...]
In Inzalo v Chief Albert Luthuli Municipality, the court examined disputes over public procurement, contractual obligations, and alleged unlawful enrichment in the context of data ownership. This case offers a key lesson that you must be able to analyse and […]
The South African National Policy on Data and Cloud was published in May 2024. Data is at the heart of everything and so it is hard to imagine a more important government policy. If South Africa gets its government [...]
In this case, State v Ndiki and others, the court ruled that computer-generated evidence labelled as hearsay under the Law of Evidence Amendment Act 45 of 1988 (LEAA) could be admitted under specific provisions of the Act. Evidence based solely […]
On January 29, 2024, the Information Regulator organised a webinar to discuss the risks of false information in elections. They focused on “disinformation,” which is intentionally misleading false information, and “misinformation,” which is innocently sharing false information believing it [...]
WB v RB is an important judgment regarding medical records disclosure. A husband requested access to his wife's bipolar disorder health records for child custody proceedings. The court ordered the clinic to reveal the treatment details while respecting confidentiality [...]
The Protection of State Information Bill (or POSI Bill or Secrecy Bill) is a draft law in South Africa that deals with the classification and protection of state information. Some people call it the Secrecy Bill, POSIB or the POSI [...]
The spread of misinformation and deceptive content is not a new challenge. However, advancements in technology, particularly AI, have amplified this problem, enabling the creation of compelling fake audio and video content known as deepfakes. As Microsoft co-founder Bill Gates [...]
Data poisoning poses a significant threat to AI models, compromising their integrity and reliability. As organisations increasingly rely on AI technologies, safeguarding AI models from data poisoning attacks becomes paramount. In this post, we explore the role of the law [...]
