The initial difficulty that South Africa is facing is that it does not have a cybercrimes commission. At present, the Information Regulator works closely with the police and the Hawks but uses its own processes separate to those used by the police and the Hawks when receiving data breach notifications and providing adequate measures to safeguard against future data breaches.