Cybersecurity Law

Cybersecurity or information security is a crucial part of information management. We are experts on the legal aspects regards the security of information (infosec). You can read our advice, or about the products or services we offer related to this focus area below:

Information security incident reports

Navigating the stormy seas of information security requires more than just a robust ship; it also demands a vigilant crew equipped with precise navigation tools. Information security incident reports are essential tools in the world of data protection. This document [...]

By |2024-08-13T18:00:45+02:00August 13th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |
Read More

Privacy obligations in the BEC case of ENS v Hawarden

In the matter of ENS v Hawarden, the SCA overturned the judgment in the High Court in Gauteng, holding ENS liable for the loss suffered by Mrs Hawarden because of a business email compromise. The SCA's finding is primarily based [...]

By |2025-07-28T11:02:52+02:00July 30th, 2024|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , , , |
Read More

CrowdStrike outage: What happened and what we can learn?

On Friday, 19 July 2024, a global IT outage disrupted many users worldwide. CrowdStrike, a leading cybersecurity firm, released a faulty security update that caused Microsoft Windows devices to crash. The CrowdStrike outage impacted Microsoft's Windows 365 Cloud PCs, apps, [...]

By |2024-07-23T15:23:29+02:00July 23rd, 2024|Categories: Cybersecurity Law|Tags: , |
Read More

Cybersecurity due diligence

Cybersecurity acts like a watchtower in our connected world, vigilantly spotting potential threats. As businesses link more closely, protecting their supply chains from cyber attacks becomes increasingly vital. This article focuses on the essential role of Service Level Agreements (SLAs) [...]

By |2025-03-20T13:24:45+02:00July 2nd, 2024|Categories: Cybersecurity Law|Tags: |
Read More

Edward Nathan Sonnenbergs (ENS) v Hawarden | BEC

In Edward Nathan Sonnenbergs(ENS) v Hawarden, ENS appealed the judgment handed down in Hawarden v Edward Nathan Sonnenbergs. The Supreme Court of Appeal (SCA) upheld the appeal and dismissed the original order from the high court. Hawarden may appeal this [...]

By |2025-08-05T20:22:15+02:00June 14th, 2024|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , , , , , , |
Read More

Data subject breach notification

Imagine a castle under siege, and the guards fail to alert the inhabitants. In the world of data protection, data subject breach notifications act as crucial alarms, ensuring individuals are aware of threats to their personal data. Data protection laws, [...]

By |2024-06-10T17:15:57+02:00June 10th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , , , , |
Read More

Data breach legal strategies

Dealing with a data breach is like trying to turn off a complex alarm system, where cutting the wrong wire can make things worse instead of quieting the alarm. Breaches include leaks, hacks and other information security compromises. As we [...]

By |2026-10-01T10:28:39+02:00June 6th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , , , , |
Read More

Access control policy development

An access control policy is a permission slip for an organisation's crucial assets, such as data and systems. It specifies who can access particular resources, ensuring the security of operations and adherence to standards like ISO 27001. Essential elements of [...]

By |2024-04-23T13:47:01+02:00April 23rd, 2024|Categories: Cybersecurity Law|Tags: |
Read More

CISO cybersecurity liability in the US

For CISOs looking to avoid cybersecurity liability, managing cybersecurity can feel like tensely moving blocks in a tower and hoping it doesn't fall over. Each move by Chief Information Security Officers (CISOs) must ensure their company's digital safety without inviting [...]

By |2024-03-27T00:29:37+02:00March 27th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |
Read More

Running an information security programme in the UAE

In the UAE’s ever-evolving digital landscape, the need for robust information security practices cannot be overstated. From the bustling economic hub of Dubai to the advanced infrastructure of Abu Dhabi, businesses operating within the UAE, including its free zones like [...]

By |2024-08-26T21:27:14+02:00March 19th, 2024|Categories: Cybersecurity Law|Tags: |
Read More

Information security incident reporting trends

Understanding how to effectively report and manage cybersecurity incidents is crucial in our fast-paced digital age. Indeed, it requires precision, quick thinking, and a deep understanding of the ever-changing cybersecurity landscape, like carefully threading a needle amidst a whirlwind of [...]

By |2024-03-12T11:42:35+02:00March 12th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |
Read More