Enforcement Action

Avoid enforcement action by getting our insights into the latest fines and notices authorities have issued and practical tips on how to avoid them.

Only some are linked below. To read all previous insights and be alerted to future insights, join the relevant Michalsons programme. You can view the public and the “Members only” ones if you are a member and logged in.

RAV enforcement action | Royalty payments

The information regulator issued its first PAIA enforcement notice to Risa Audio Visual (RAV). Hardwick Trading (Hardwick) complained to the information regulator after RAV's CEO denied their request for access to records relating to the distribution of royalty payments that [...]

PAIA compliance notice in terms of the Promotion of Access to Information Act

Last week, the information regulator issued PAIA compliance notices to several public and private bodies in terms of the Promotion of Access to Information Act (PAIA). Although the regulator's notice is addressed to public bodies and to "Deputy Information Officers", [...]

ICO issues preliminary enforcement notice against Snap

On 6th October 2023, the UK Information Commissioner Officer (ICO) issued a preliminary enforcement notice against Snap, SnapChat's parent company. ICO issued the preliminary enforcement notice due to Snap's potential failure to properly assess the privacy risks posed by its [...]

By |2024-05-22T10:01:46+02:00October 7th, 2023|Categories: AI Governance|Tags: , , , , |

GDPR enforcement actions – March 2023

As the saying goes, "March comes in like a lion and goes out like a lamb". Regarding GDPR enforcement actions collated in March 2023, the lion has roared. Recent enforcement actions related to the General Data Protection Regulation (GDPR) in [...]

National Department of Health enforcement action | Access to information

The South African Information Regulator (IR) has referred the National Department of Health (NDoH) to the enforcement committee because the NDoH has not provided information about personal data it collected during the COVID-19 pandemic. The regulator might issue an enforcement [...]

Information Regulator versus SAPS. The scalding tea.

By now, you’d have heard about SA’s latest battle: Information Regulator versus SAPS. But what’s the actual tea? Why’s our Information Regulator taking on SAPS? Do they even have the authority to take on SAPS? Perhaps you think POPIA doesn’t apply [...]

By |2024-08-15T14:52:06+02:00September 1st, 2022|Categories: POPI and Data Protection|Tags: , |

Youtube and COPPA – what do you need to know?

The Federal Trade Commission (FTC) recently hit YouTube and Google with a $170 million fine due to YouTube collecting children's personal data without their parent's consent. The FTC relied on the Children's Online Privacy Protection Act (COPPA) as a basis [...]