Information Regulator

Insights, news or developments related to the Information Regulator in South Africa, including updates on webinars or events held by them.

Truth or lies? Deep fakes and other risks

On January 29, 2024, the Information Regulator organised a webinar to discuss the risks of false information in elections. They focused on “disinformation,” which is intentionally misleading false information, and “misinformation,” which is innocently sharing false information believing it [...]

The five stages of POPIA grief

For many, POPIA's arrival signalled nothing but the coming of massive headaches. It was like they were about to receive pets they never wanted to be stuck with, or, even worse, annoying new neighbours who constantly peer over their fences [...]

By |2025-02-28T13:18:14+02:00January 27th, 2024|Categories: POPI and Data Protection|Tags: , , |

The law in 2024 – our predictions

At the beginning of each year, we gaze into the near future to try and help you prioritise your next steps. This is the law in 2024. We try to predict what will happen and what it will mean for [...]

Enforcement Notice from the Information Regulator: what now?

The information regulator may send you a POPIA enforcement notice after investigating you and finding that you have contravened POPIA by failing to lawfully process personal information. In comparison, the information regulator may send you an infringement notice if it [...]

RAV enforcement action | Royalty payments

The information regulator issued its first PAIA enforcement notice to Risa Audio Visual (RAV). Hardwick Trading (Hardwick) complained to the information regulator after RAV's CEO denied their request for access to records relating to the distribution of royalty payments that [...]

Insights from the regulator

On Friday, 6 October, I listened in on an interesting interview with Adv Pansy Tlakula. She shared some interesting insights about the regulator's work, the status of certain enforcements and some projects they are working on. I decided to share [...]

POPIA Compliance Assessment | The regulator’s health check

What if I told you that the Information Regulator is fond of health checks? Would you envision something as scary (to many) as a tooth extraction or blood test, or would you envision what it actually is: a POPIA Compliance [...]

SAPS enforcement action | security compromise part 1

The information regulator issued its first enforcement notice to SAPS. After conducting an independent investigation, the regulator found that SAPS breached several conditions for the lawful processing of personal data. The regulator also found that SAPS failed to notify the [...]

Data protection fines in Africa

Data protection fines in Africa are on the rise as more authorities enforce compliance with data protection laws. Data protection authorities in Angola and Kenya have hit the ground running by enforcing data protection laws. In this article, we highlight [...]

National Department of Health enforcement action | Access to information

The South African Information Regulator (IR) has referred the National Department of Health (NDoH) to the enforcement committee because the NDoH has not provided information about personal data it collected during the COVID-19 pandemic. The regulator might issue an enforcement [...]

How to make the Information Regulator happy with your organisation

Picture yourself sitting on your couch at home, causally flicking through channels. The Information Regulator and data protection are the last things on your mind; and yet there you are, stumbling onto a press conference the Information Regulator is doing. [...]

Pre-investigation Notice from the information regulator: what now?

If a complainant lodges a complaint against you for infringing their privacy rights, the information regulator can issue any one of a few types of notices to you. For example, you could receive an information notice, an enforcement notice, or [...]