data protection fines

Liquid Telecom enforcement action | Recording meeting without consent

The Liquid Telecom enforcement action regarding recording meeting without consent arises from a decision where Kenya’s data protection regulator fined Liquid Telecommunications Kenya 700,000 Kenyan Shillings for unlawfully recording and retaining a former executive's Zoom meeting without consent. The ruling […]

FT Rams Consulting enforcement action | Email direct marketing

The Information Regulator is taking enforcement action against FT Rams Consulting for non-compliance with section 69 of POPIA - the section that deals with direct marketing. This FT Ram Consulting fine of R200k follows a complaint from a data subject […]

Blouberg Municipality enforcement action | Further processing of financial disclosures

The regulator has fined Blouberg Municipality R500 000 after a complaint from a former employee. This Blouberg Municipality enforcement action arose because the municipality unlawfully published the employee’s personal information on its website in a declaration of interest. As a […]

Nigeria fines Meta | Data breach penalty upheld

In an appeal brought by Meta Platforms Inc. and WhatsApp, LLC, the Competition and Consumer Protection Tribunal confirmed that their conduct violated data protection and competition laws. The Tribunal affirmed the Federal Competition and Consumer Protection Commission's (FCCPC) decision to [...]

TikTok’s GDPR transfers – Understanding the €530M fine

Let's discuss TikTok’s GDPR transfers. Managing cross-border data flows under GDPR can be as treacherous as navigating iceberg-strewn waters — hidden dangers lurk beneath the surface. TikTok recently discovered how severe those dangers can be, facing a landmark €530 million [...]

DoJ enforcement action | Personal information compromise

The Information Regulator’s DoJ enforcement action, followed by the DoJ infringement notice, highlights the risks of failing to address a personal information compromise under the Protection of Personal Information Act (POPIA). The Department of Justice (DoJ) failed to secure the [...]

Direct marketing fines: How to avoid them

The Information Commissioner’s Office (ICO) in the UK handed out ten direct marketing fines in the last year. We've all received annoying direct marketing calls at some point in our lives but for some organisations direct marketing is vital. If [...]

Using an outsourced DPO to avoid fines

Data protection regulations are becoming increasingly strict. In response, many organisations are turning to outsourced Data Protection Officers (DPOs) to ensure that their organisation remains fully compliant. An outsourced DPO helps an organisation follow its data protection plan and makes [...]

Data protection fines in Africa

Data protection fines in Africa are on the rise as more authorities enforce compliance with data protection laws. Data protection authorities in Angola and Kenya have hit the ground running by enforcing data protection laws. In this article, we highlight [...]