1 July 2021 was the POPIA deadline in South Africa. After the POPIA commencement date or effective date (which was 1 July 2020) there was a 12-month grace period - so the POPIA deadline was at the end of [...]
Recently, WhatsApp updated its privacy policy. The company communicated the policy to its users via an in-app notification. This notice prompted users either to accept or to reject the policy. Notably, the policy contained an ultimatum paraphrased as: “accept [...]
Have you ever wondered if data privacy laws apply to Outer Space? Usually, we think the laws apply horizontally. That is, between people, companies, and across country borders. But, SpaceTech disrupts how organisations typically collect, process, and transfer data. [...]
Have you watched Elon Musk’s live debut of his new brain device? It’s the latest neurotechnology invention created by his company, Neuralink. The device is going to have curious consequences for Neurolaw. If you missed it, not to worry. Here’s [...]
Data breach notification is both good business and required by law. What can we learn from the Regulator’s media statement on the Experian breach? Not if but when Commentators on cybersecurity warn “…it is not a question of if [...]
Data protection for community schemes is a real issue. Body corporates and Home Owners' Associations (often collectively referred to as community schemes) need to comply with POPIA and other data protection laws, because they process a lot of personal information. [...]
Kenya is now a member of the club with its new Kenya Data Protection Act of 2019. We will answer the FAQ so that you are prepared and know your next steps. More and more countries are implementing data [...]
The Act on the Protection of Personal Information (APPI) is one of Japan's most important laws and the Japanese Parliament recently amended it. In response to the increased processing of personal information in society and various sectors (such as the [...]
In Black Sash Trust v Minister of Social Development, the Constitutional Court agreed with the Information Regulator that data subjects own their personal information and that a responsible party cannot transfer the data subject's personal information to another party. [...]
As data protection law develops, it frequently comes into conflict with freedom of expression. The right to privacy (like data protection) and freedom of expression are in a precarious balancing act and need to be handled carefully. The latest freedom [...]
Does complying with the Protection of Personal Information Act (POPIA) also mean that you must use email encryption when sending emails containing personal information? In other words, does sending unencrypted emails containing personal information potentially violate POPIA? The short answer is: [...]
We've recently been getting asked the question: What is a Data Protection Officer? This is a sign of just how much interest there is in the position of the Data Protection Officer. Organisations, both in the European Union and outside, [...]
