Enforcement Action

Home/Tag:Enforcement Action

Avoid enforcement action by getting our insights into the latest fines and notices authorities have issued and practical tips on how to avoid them.

Only some are linked below. To read all previous insights and be alerted to future insights, join the relevant Michalsons programme. You can view the public and the “Members only” ones if you are a member and logged in.

Advanced Computer Software Group enforcement action | Ransomware

The Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd (ACSG) £3.07 million following a ransomware incident that exposed the personal data of 79,404 people. The ICO found that ACSG failed to implement adequate security measures, leaving [...]

PAIA compliance assessments by information regulator

South Africa’s Information Regulator conducts PAIA compliance assessments on public and private bodies in terms of section 77H of the Promotion of Access to Information Act (PAIA). PAIA plays a crucial role in an organisation's transparency and accountability to the [...]

Department of Basic Education enforcement action | Consent

The Information Regulator issued an enforcement notice against the Department of Basic Education (DBE) on the issue of consent under POPIA on 6 November 2024. The DBE has a long-standing practice of publishing matric results in newspapers, but this practice [...]

Information Regulator aims to step up enforcement

The information regulator briefed the public and the media on 11 September 2024 on some enforcement activities over the last quarter (since 1 April 2024). The central theme was that the regulator has taken various enforcement actions but hasn't succeeded [...]

DOJ infringement notice 1 | Security measures

The information regulator issued a DoJ infringement notice to the Department of Justice where it fined the DoJ R5 million. In May 2023, the regulator issued the DoJ with an enforcement notice outlining a list of remedial actions the DoJ [...]

Lingo Telecom enforcement action | Robocalling fine

The Federal Communications Commission (FCC) proposed a landmark enforcement action against Lingo Telecom, a voice service provider, for violations of caller ID authentication rules under the STIR/SHAKEN framework. This proposal followed the transmission of thousands of spoofed robocalls, including deepfake [...]

By |2025-04-01T16:58:38+02:00September 1st, 2024|Categories: POPI and Data Protection|Tags: , , |

State Security Agency (SSA) enforcement action | ANA expenditure

The Information Regulator issued an enforcement notice to the State Security Agency (SSA) regarding a PAIA record request. The SSA had refused to provide the information to the requester. This refusal prompted the Regulator to investigate and issue the SSA [...]

Nigeria fines Meta | data breach

Imagine waking up to find out your favourite messaging app has been secretly sharing your personal information without your permission. That's exactly what happened to millions of Nigerians using WhatsApp. But this time, the Nigerian government decided enough was enough. [...]

IEC Security Compromise: a case study on notifying the regulator

With the general elections set to be held on 29 May 2024, the last thing South Africans want to hear are details of a security compromise at the IEC. On the other hand, the Information Regulator is in need [...]

Pinnacle Life enforcement notice | Unsolicited marketing calls

The Information Commissioner’s Office (ICO) issued a monetary penalty to Pinnacle Life Limited in its latest Pinnacle Life enforcement notice, a UK-based insurance broker, for breaching direct marketing laws. The £80,000 penalty highlights the importance of robust compliance with the [...]

By |2025-04-01T14:57:46+02:00April 1st, 2024|Categories: POPI and Data Protection|Tags: , , |

SAPS enforcement action | security compromise part 2

In less than 18 months, the information regulator has cracked down on SAPS security compromise. This investigation stems from a security compromise where sensitive details, including personal information, were leaked on WhatsApp. The leaked information reportedly included details related to [...]