data protection laws

Telco cybersecurity in South Africa – finding a signal in the noise

Let's talk telco cybersecurity in South Africa. Securing a telecommunications network is like trying to tune into a radio station amid heavy static: operators must carefully adjust both their security controls and their compliance processes to cut through the noise. [...]

Cybersecurity compliance mapping – finding every obligation

What is cybersecurity compliance mapping? Navigating cybersecurity compliance today is like conducting a precise archaeological dig: you must carefully uncover each layer of obligations without damaging your organisation's underlying structure. Each jurisdiction, sector, and obligation presents distinct challenges, demanding meticulous [...]

By |2025-07-31T11:41:07+02:00July 22nd, 2025|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |

Data classification best practices

We've all got that chaotic drawer at home — a messy collection of old chargers, mystery keys, forgotten receipts, and batteries that may or may not work. While such clutter at home might only cause mild frustration, allowing your business [...]

The law in 2025 – our predictions

Welcome to the law in 2025! At the beginning of each year, we gaze into the future to help you prioritise your next steps. This is the law regarding digital, data and tech in 2025. We try to predict what [...]

The Ethiopian Data Protection Law – the PDPP

Attention! Ethiopia has just upped its game in the digital privacy arena. The country has officially rolled out the Personal Data Protection Proclamation No. 1321/2024(let's call it "the PDPP" for short), and it's a game-changer for anyone handling personal info. [...]

By |2024-11-12T10:56:16+02:00August 30th, 2024|Categories: POPI and Data Protection|Tags: , , , |

Information security incident reports

Navigating the stormy seas of information security requires more than just a robust ship; it also demands a vigilant crew equipped with precise navigation tools. Information security incident reports are essential tools in the world of data protection. This document [...]

By |2024-08-13T18:00:45+02:00August 13th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |

South Korea fines AliExpress | Personal data violations

South Korea's privacy watchdog has just taken a big swing and fines e-commerce giant AliExpress. This move shows the country means business when it comes to protecting its citizens' personal info, even when dealing with big-name international players. Overview of [...]

DUAA Overview: The UK’s Data Use and Access Act

The UK Data (Use and Access) Act (DUAA) is now in force and introduces important changes to the UK's data protection laws. It doesn't replace existing laws but amends them to make compliance easier for organisations. It supports responsible innovation [...]

The Malawi Data Protection Act

Understanding and complying with data protection laws is crucial for any business handling personal information. Malawi's Data Protection Act is designed to safeguard individuals' personal data, ensuring privacy and security. We'll break down the essentials of the Malawi Data Protection [...]

By |2024-06-27T21:59:00+02:00June 4th, 2024|Categories: POPI and Data Protection|Tags: , , |

Australian data protection and cybersecurity

In the digital era, cybersecurity remains a critical concern for organisations worldwide, with the Australian data protection and cybersecurity approach being an interesting way of addressing these challenges. The country's approach to cyber threats, grounded in proactive risk management and robust [...]

By |2024-05-22T08:48:45+02:00April 4th, 2024|Categories: POPI and Data Protection|Tags: , , , |

CISO cybersecurity liability in the US

For CISOs looking to avoid cybersecurity liability, managing cybersecurity can feel like tensely moving blocks in a tower and hoping it doesn't fall over. Each move by Chief Information Security Officers (CISOs) must ensure their company's digital safety without inviting [...]

By |2024-03-27T00:29:37+02:00March 27th, 2024|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |

Unauthorised access prevention case studies

When it comes to unauthorised access prevention, it helps to look at some case studies. Protecting personal data against unauthorised access is more crucial than ever in today's interconnected world. The GDPR stands at the forefront of this battle, aiming [...]

By |2024-03-21T18:40:52+02:00March 21st, 2024|Categories: POPI and Data Protection|Tags: , , |