Information Regulator ramps up enforcement: on 1 September 2026, the Information Regulator briefed the public and media on its latest enforcement and compliance activities under POPIA and PAIA. The briefing shows the Regulator increasingly concerned about South Africa's cybersecurity environment. [...]
The Information Regulator may send you a POPIA enforcement notice after investigating you and finding that you have contravened POPIA by failing to lawfully process personal information. In comparison, the Information Regulator may send you an infringement notice if it [...]
Sibanye-Stillwater enforcement action was taken by the Information Regulator, who issued a PAIA enforcement notice against the company on 22 May 2026 after Sibanye refused access to its Social and Labour Plan (SLP) compliance reports. The Information Regulator found that […]
The Central Johannesburg TVET College enforcement action confirms that the Information Regulator will act when POPIA conditions are not met. On 22 May 2026, the Regulator issued its first formal enforcement notice of the year, following complaints lodged by employees [...]
In August 2025, South Africa’s Information Regulator issued an enforcement notice against the Kudung Communal Property Association (Kudung CPA) for failing to provide access to requested records under the Promotion of Access to Information Act (PAIA). After Kudung CPA ignored […]
South Africa’s Information Regulator has issued a formal enforcement notice against WhatsApp for failing to comply with the Protection of Personal Information Act (POPIA).This marks a significant step in enforcing South Africa’s data protection laws and signals that the Regulator [...]
The Information Regulator issued a POPIA enforcement notice against Lancet Laboratories in September 2024 for failing to comply with the breach notifications required by POPIA. The Information Regulator conducted a POPIA compliance assessment following the numerous security compromises experienced by [...]
The information regulator briefed the public and the media on 11 September 2024 on some enforcement activities over the last quarter (since 1 April 2024). The central theme was that the regulator has taken various enforcement actions but hasn't succeeded [...]
The Information Regulator issued an enforcement notice to the State Security Agency (SSA) regarding a PAIA record request. The SSA had refused to provide the information to the requester. This refusal prompted the Regulator to investigate and issue the SSA […]
Getting an enforcement notice from the regulator is not the worst thing that can happen to FT Rams Consulting or any other non-compliant organisation. You will agree with me, after reading the discussion below, that getting an infringement notice is [...]
The UK Information Commissioner's Office (ICO) has issued a biometric recognition enforcement notice against Serco Leisure (Serco Leisure enforcement notice) for their unlawful use of facial recognition technology and fingerprint scanning to monitor employee attendance. Serco Leisure enforcement notice order [...]
The information regulator issued its first enforcement notice to SAPS. After conducting an independent investigation, the regulator found that SAPS breached several conditions for the lawful processing of personal data. The regulator also found that SAPS failed to notify the [...]
