Cybersecurity Law

Cybersecurity or information security is a crucial part of information management. We are experts on the legal aspects regards the security of information (infosec). You can read our advice, or about the products or services we offer related to this focus area below:

AU Convention on Cyber Security and Personal Data Protection | Malabo Convention

In 2014, the African Union (AU) Convention on Cyber Security and Personal Data Protection adopted a legal framework for addressing cybercrime and data protection in Africa. The Convention is also known as the Malabo Convention and several African countries signed [...]

By |2025-06-02T08:03:30+02:00April 24th, 2023|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , |
Read More

SOC 2 implementation: The legal side of things

Dear Gentle Reader. Today, we’re talking about the legal considerations that come with implementing SOC 2. Now, I know what you’re thinking: “Legal considerations? Yawn.” But trust me, folks, this is an important topic that deserves your attention. So please [...]

By |2024-08-26T21:21:29+02:00April 18th, 2023|Categories: Cybersecurity Law|
Read More

Secure data sharing

Navigating the world of data sharing can feel like traversing a minefield. But don't worry. We're here to provide a reliable map for data protection officers that leads to secure data-sharing practices. Understanding data sharing Data sharing involves data providers [...]

By |2023-04-04T21:41:52+02:00April 4th, 2023|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , |
Read More

Incident response training through roleplay

Picture this: You're in a dimly lit room, a mysterious figure lies dead on the floor, and you've got a room full of suspects. The culprit? A data breach, insider threat, or even a malicious malware attack. No, this isn't [...]

By |2024-04-18T14:25:16+02:00March 29th, 2023|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , , |
Read More

GDPR enforcement actions – March 2023

As the saying goes, "March comes in like a lion and goes out like a lamb". Regarding GDPR enforcement actions collated in March 2023, the lion has roared. Recent enforcement actions related to the General Data Protection Regulation (GDPR) in [...]

By |2024-02-28T07:31:08+02:00March 28th, 2023|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , , |
Read More

Third party risk management: never do it alone

In today’s interconnected and international business world, third party risk management is vital to your organisation’s risk management strategy. Third-party relationships introduce significant risks to your business, whether with suppliers, vendors, or service providers. These risks include data breaches, intellectual [...]

By |2024-08-25T22:18:15+02:00March 17th, 2023|Categories: Cybersecurity Law|
Read More

DKIM: what is it and why does it matter?

Email has long been a primary mode of communication, and we depend on it for both personal and business use. However, email security has become a significant concern with increasing cyber threats. As a result, using DKIM has become increasingly [...]

By |2024-08-25T22:19:42+02:00March 16th, 2023|Categories: Cybersecurity Law, Electronic Communications Law, Email Law|
Read More

Membership inference attacks | A new AI security risk

Let’s explore a new AI security risk: membership inference attacks. What is it? It’s an AI attack during which an attacker tries to determine if you have used a particular person’s personal information to train a machine learning model. The [...]

By |2024-08-26T06:21:09+02:00March 8th, 2023|Categories: AI Governance, Cybersecurity Law, POPI and Data Protection|
Read More

Model inversion attacks | A new AI security risk

Let’s explore a new AI security risk: model inversion attacks. What is it? It’s a type of AI attack during which an attacker tries to infer personal information about a data subject by exploiting the outputs of a machine learning [...]

By |2024-08-26T06:21:36+02:00March 8th, 2023|Categories: AI Governance, Cybersecurity Law, POPI and Data Protection|
Read More

Safi v Gascoigne | BEC

In Safi v Gascoigne, Safi sued Gascoigne Randon and Associates, a conveyancing firm, for a loss of R889,308.50 from a business email compromise (BEC).  Who should care about this judgment and why? The public because they need to be aware [...]

By |2024-02-20T14:01:49+02:00March 6th, 2023|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , , , , , , , |
Read More