Information Regulator guidelines

Rules or Regulations on the processing of Health Information under POPIA 2026

The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]

Ask the Regulators: Support for PAIA compliance, e-Services and BizPortal

Today, the South African information regulator held a webinar called "Ask the Regulator". The purpose of the webinar was to allow participants to ask the regulator questions and for the regulator to encourage and support them in complying with POPIA […]

Notification of security compromise to the Information Regulator | Guideline and support

The information regulator published a Guideline on notification of security compromises to the information regulator in July 2020. The guideline explains the procedure responsible parties or information officers should follow to notify the regulator of a security compromise or data [...]

Guidelines on procedures for making information electronically available

The information regulator issued a guideline on procedures for making information electronically available (dated March 2022). The purpose of the guideline is to recommend the procedures for public and private bodies to make information electronically available to enable people to obtain [...]

Guidelines to develop Codes of Conduct

Data protection authorities around the world can issue or approve Codes of Conduct under applicable data protection law. Monitoring bodies or associations often draft them and then submit them to the authority to be issued. To facilitate this process authorities [...]

Access to information and data protection in elections

We need free and fair elections in order for democracy to work. Two key aspects of ensuring that the people's voice is heard is access to information (transparency or shining a light on the process) and data protection (processing [...]