In Minister of Basic Education v Information Regulator, the High Court set aside the regulator’s enforcement notice issued to the DBE. The notice tried to stop the Department from publishing the matric results using examination numbers. The judgment provides guidance on consent and on appealing an enforcement notice. The judgment clarifies when information amounts to personal information, when consent is required, and how organisations can appeal enforcement notices. The court ultimately allowed the appeal, setting aside both notices, and ordered the Information Regulator to pay the costs.

Who should care about this judgment?

  • Responsible parties who have received an enforcement notice from the Information Regulator and want to understand whether and how they can appeal.
  • Responsible parties processing children’s personal information or wanting to know whether certain information is in fact personal information.
  • Legal and compliance teams who are responsible for responding to regulatory findings, enforcement notices, or infringement notices under POPIA.

What could you do about it?

  • Assess whether and how to appeal an enforcement notice by seeing a previous example.
  • Lawfully process children’s information by reviewing the judgment.
  • Know what personal information you process by mapping your data or activities.

Our Insights

The court confirmed that POPIA does not require consent every time information is published. Consent is only required where personal information relates to an identifiable person. The court rejected the argument that using examination numbers automatically renders matric results personal information. Speculative or hypothetical identification is not enough to trigger POPIA.

In practical terms, organisations should understand what personal information they actually process and why. Proper data or activity mapping and evidence-based decision-making can reduce unnecessary compliance burdens and place organisations in a stronger position when responding to regulatory action.

Digest of Minister of Basic Education v Information Regulator

Facts and background

For several years, the DBE has published matric results in local newspapers using only examination numbers and results. It does not publish learners’ names. It did so in terms of a 2022 High Court order, granted by agreement and with the Regulator cited, which authorised publication in this anonymised form.

In 2024, the Information Regulator conducted an assessment under section 89(1) of POPIA and concluded that the publication of results infringed learners’ right to privacy. The Regulator issued an enforcement notice in terms of section 95 of POPIA, directing the DBE to stop publishing results in newspapers, to obtain consent for future publication, and to redesign its examination numbering system.

The DBE appealed the enforcement notice under sections 97 and 98 of POPIA. The court paused the related enforcement notice and review proceedings until the outcome of the appeal.

Reasoning

Condonation

The Regulator argued that the appeal was invalid because it was served six days late and that the court had no power to excuse a failure to meet the 30 day deadline in section 97(1) of POPIA. The court disagreed. It held that courts have the discretion to grant condonation where the interests of justice require it, even when a statute sets a time limit. The court found that the delay was short, properly explained, and caused no real prejudice to the Regulator. The court therefore granted condonation. This allowed the courts to deal with the appeal of the enforcement notice.

Merits

The central issue in Minister of Basic Education v Information Regulator was whether the publication of matric results using examination numbers constituted the processing of “personal information” relating to an “identifiable” learner under POPIA.

The Regulator argued that learners could be identified because examination numbers are allocated sequentially and learners sit in that sequence during examinations, making it possible for learners in the same school to identify each other’s results. This would require a learner to recall their own exam number and the seating arrangement during the examination.

The court rejected this reasoning as speculative and detached from reality. It held that information is personally identifiable only if it permits identification “without more” and without unusual diligence. The court drew a clear line between information that identifies a person on its own and information that requires additional steps or insider knowledge. The court described the Regulator’s theory as a “poorly constructed thought experiment” unsupported by evidence.

Order: Enforcement notice set aside

The High Court set aside the Information Regulator’s enforcement notice dated 6 November 2024 as well as the infringement notice dated 23 December 2024. The Department was entitled to continue publishing the matric results using examination numbers. The court confirmed that the regulator may not issue enforcement notices without a proper legal and factual basis. The court ordered the Information Regulator to pay the costs of the appeal, including the costs of counsel.

Details of Minister of Basic Education and Another v Information Regulator

  • Universal citation : [2025] ZAGPPHC 1298
  • Case number: 148459/24
  • Full name: Minister of Basic Education and Another v Information Regulator of South Africa and Others (148459/24) [2025] ZAGPPHC 1298 (12 December 2025)