Cybersecurity Law

Cybersecurity or information security is a crucial part of information management. We are experts on the legal aspects regards the security of information (infosec). You can read our advice, or about the products or services we offer related to this focus area below:

ISO 27001 policies: What does the infosec standard require?

In today's digital world, robust cybersecurity is essential. Enter ISO 27001 – a stalwart standard that serves as a comprehensive blueprint for constructing an impregnable information security fortress. ISO 27001 offers a detailed plan for organisations to create a secure [...]

By |2024-03-08T13:00:39+02:00March 8th, 2024|Categories: Cybersecurity Law|Tags: |

AI and data protection: a new age love story

Shakespeare’s Sonnet 116 characterises love as a permanent and unending state, and with the rise of AI, your data will be forever memorialised. “Love is… an ever-fixed mark, that looks on tempests and is never shaken.”  – William Shakespeare. We [...]

By |2024-02-28T21:35:51+02:00February 14th, 2024|Categories: AI Governance, Cybersecurity Law, POPI and Data Protection|Tags: |

SEC cyber disclosure: Navigating new rules and compliance

New rules from the Securities and Exchange Commission (SEC) have changed how public companies report cybersecurity incidents and risks in the USA. These rules aim to simplify things and protect investors from cyber attacks. To navigate the new rules as [...]

By |2024-02-01T09:48:02+02:00February 1st, 2024|Categories: Cybersecurity Law|

Biometric laws around the World

Biometric data is information collected from body measurements and calculations related to human characteristics using technologies such as facial recognition or fingerprint scanners. The purpose of this collection is surveillance. As biometrics have fast become more popular, countries like the [...]

Lester Connock Commemoration Fund v Brough Capital | BEC

In Lester Connock Commemoration Fund v Brough Capital, the high court held Brough Capital liable for a breach of agreement in administering funds for the Rotary Club of Rosebank. The court found that fraudulent email transactions totalling R3.1 million occurred [...]

By |2024-02-20T07:53:19+02:00November 29th, 2023|Categories: Cybercrime, Cybersecurity Law|Tags: , , |

AI sextech: Exploring the kinks

In the world of technology, some relationships get... intimate. The union between AI and sextech might just be the steamiest one yet. As we explore the possibilities and navigate the curves of this relationship, we find some kinks we need [...]

By |2024-08-26T21:42:09+02:00September 5th, 2023|Categories: AI Governance, Cybersecurity Law, POPI and Data Protection|Tags: |

Dis-Chem enforcement notice | data breach

The information regulator issued a Dis-Chem enforcement notice to Dis-Chem Pharmacies for non-compliance with the Protection of Personal Information Act (POPIA). In April 2022, an unauthorised party gained access to more than 3 million data subjects' records from Dis-Chem's database. [...]

Insider threats in cybersecurity

When it comes to insider threats in cybersecurity, imagine your organisation as a fortress. While guards diligently watch the gates for outside invaders, the real threat might be silently digging a tunnel beneath your feet. These quiet tunnel diggers are [...]

By |2023-08-22T22:36:00+02:00August 22nd, 2023|Categories: Cybersecurity Law|Tags: |

Ransomware attacks and legal compliance

Let's talk about ransomware attacks and legal compliance. Navigating the wild forest of cybersecurity is a daring challenge in this digital age, with ransomware attacks lurking like predators, ready to pounce on any unsuspecting prey. With a global surge in [...]

By |2023-08-10T15:17:17+02:00August 10th, 2023|Categories: Cybersecurity Law|Tags: |

Generative AI and information security law compliance

Generative AI is like a celestial nebula – a dazzling mass of potential capable of forging countless stars or cyber threats. As navigators of this cosmos, we must decipher its intricacies to ensure a harmonious balance between this emerging technology [...]

By |2023-08-10T14:49:59+02:00August 10th, 2023|Categories: AI Governance, Cybersecurity Law|Tags: , |

Certification automation for infosec compliance

Maintaining a solid infosec compliance framework in business can sometimes feel like constantly fixing the weakest links in an unending chain. Information security (infosec) compliance is critical in maintaining business operations, enhancing internal security protocols, and creating stakeholder trust. However, [...]

By |2023-06-15T12:52:11+02:00June 15th, 2023|Categories: Cybersecurity Law|Tags: |

Achieving information security compliance in South Africa’s public sector

South Africa has taken significant strides in promoting accountability in the public sector for information security compliance. The Protection of Personal Information Act (POPIA) and Promotion of Access to Information Act (PAIA) continue to be a major focus for the [...]