POPI and Data Protection

The protection of personal information, and privacy and data protection laws (including the GDPR and the POPI Act or POPIA) are key laws in today’s information society. Information compliance or information rights are central to so many disputes. Read our insights, regulatory updates, judgment summaries, enforcement action (including fines and notes), data breaches or authority guidance.

Standard Bank | Data breach

Standard Bank, Africa’s largest bank, has disclosed a data breach affecting a number of its clients. This raises concerns about rising cybersecurity risks across South Africa’s financial sector. Standard Bank directly communicated with their clients and confirmed that someone had […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-04-29T10:58:20+02:00April 29th, 2026|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , , , |
Read More

OUTsurance enforcement action | Direct live call marketing

Direct marketing is under scrutiny as South Africa’s Information Regulator takes enforcement action against OUTsurance following an investigation into its direct live-call marketing practices. The case could become a landmark test of whether live telephone calls fall under section 69 […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-26T12:02:27+02:00March 25th, 2026|Categories: POPI and Data Protection|Tags: , , , , , |
Read More

Does POPIA apply to journalists? Generally, no.

Does POPIA apply to journalists? If POPIA does not apply to you, what must you consider when processing personal information? These are two important questions to ask if you are a journalist who has concerns about the personal information you [...]

By |2026-03-19T16:51:06+02:00March 18th, 2026|Categories: Media Law, POPI and Data Protection|Tags: , , , , |
Read More

Lodge a PAIA or POPIA complaint with the Regulator

Do you want to lodge a PAIA complaint or POPIA complaint with the Information Regulator in South Africa? Has someone failed to give you access to information or infringed on your privacy? In this article, we'll help you know how [...]

By |2026-07-21T08:44:50+02:00March 18th, 2026|Categories: Access to Information, POPI and Data Protection|Tags: , , , |
Read More

Liquid Telecom enforcement action | Recording meeting without consent

The Liquid Telecom enforcement action regarding recording meeting without consent arises from a decision where Kenya’s data protection regulator fined Liquid Telecommunications Kenya 700,000 Kenyan Shillings for unlawfully recording and retaining a former executive's Zoom meeting without consent. The ruling […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-17T16:14:16+02:00March 17th, 2026|Categories: Electronic Communications Law, Monitoring Law, POPI and Data Protection|Tags: , , , , , |
Read More

Rules or Regulations on the processing of Health Information under POPIA 2026

The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-23T14:08:04+02:00March 6th, 2026|Categories: POPI and Data Protection|Tags: , , , , , , , , |
Read More

Guidance Note on Conducting a Personal Information Impact Assessment

The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]

By |2026-03-05T11:37:58+02:00March 5th, 2026|Categories: POPI and Data Protection|Tags: , , , |
Read More

FT Rams Consulting enforcement action | Email direct marketing

The Information Regulator is taking enforcement action against FT Rams Consulting for non-compliance with section 69 of POPIA - the section that deals with direct marketing. This FT Ram Consulting fine of R200k follows a complaint from a data subject […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-05T12:31:04+02:00March 5th, 2026|Categories: Marketing Law, POPI and Data Protection|Tags: , , , , , , , |
Read More

Blouberg Municipality enforcement action | Further processing of financial disclosures

The regulator has fined Blouberg Municipality R500 000 after a complaint from a former employee. This Blouberg Municipality enforcement action arose because the municipality unlawfully published the employee’s personal information on its website in a declaration of interest. As a […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-05T12:31:13+02:00March 5th, 2026|Categories: POPI and Data Protection|Tags: , , , , , , |
Read More

Information Regulator in South Africa

The Information Regulator was created by the Protection of Personal Information Act (POPI Act). POPI gives the Information Regulator teeth - it has extensive powers to investigate and fine responsible parties. Data subjects can complain to the Information Regulator, [...]

By |2026-07-27T16:45:27+02:00March 5th, 2026|Categories: Access to Information, POPI and Data Protection|Tags: , , , , |
Read More

Guidance note on Transborder Flows of Information under POPIA

The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]

By |2026-03-05T11:53:06+02:00March 5th, 2026|Categories: Information Law, POPI and Data Protection|Tags: , |
Read More

Zulu Nyala Game Ranch v Christiaan Beukes | Using confidential customer database

In Zulu Nyala Game Ranch v Christiaan Beukes, the High Court interdicted and ordered a former employee (Beukes) who used their employer's (Zulu Nyala Game Ranch) confidential customer database to start a competing business to stop using and delete it. […]

Unlock exclusive content, join a Michalsons Programme!

Members should log in to access this content. If you're not a member then join a Michalsons programme.
By |2026-03-03T16:44:51+02:00March 3rd, 2026|Categories: Labour Law, POPI and Data Protection|Tags: , , , , , |
Read More