Information Regulator

Insights, news or developments related to the Information Regulator in South Africa, including updates on webinars or events held by them.

SAPS enforcement action | security compromise part 2

In less than 18 months, the information regulator has cracked down on SAPS security compromise. This investigation stems from a security compromise where sensitive details, including personal information, were leaked on WhatsApp. The leaked information reportedly included details related to [...]

Will FT Rams Consulting also get an infringement notice?

Getting an enforcement notice from the regulator is not the worst thing that can happen to FT Rams Consulting or any other non-compliant organisation. You will agree with me, after reading the discussion below, that getting an infringement notice is [...]

How a POPIA exemption can help your non-profit

Non-profits all need to find a balance between achieving data privacy and achieving their important operational goals. Most people know, at this point, that POPIA and other data protection laws are at the heart of that data privacy. Compliance [...]

By |2025-02-28T13:53:48+02:00February 29th, 2024|Categories: POPI and Data Protection|Tags: , , , |

Truth or lies? Deep fakes and other risks

On January 29, 2024, the Information Regulator organised a webinar to discuss the risks of false information in elections. They focused on “disinformation,” which is intentionally misleading false information, and “misinformation,” which is innocently sharing false information believing it [...]

The five stages of POPIA grief

For many, POPIA's arrival signalled nothing but the coming of massive headaches. It was like they were about to receive pets they never wanted to be stuck with, or, even worse, annoying new neighbours who constantly peer over their fences [...]

By |2025-02-28T13:18:14+02:00January 27th, 2024|Categories: POPI and Data Protection|Tags: , , |

The law in 2024 – our predictions

At the beginning of each year, we gaze into the near future to try and help you prioritise your next steps. This is the law in 2024. We try to predict what will happen and what it will mean for [...]

RAV enforcement action | Royalty payments

The information regulator issued its first PAIA enforcement notice to Risa Audio Visual (RAV). Hardwick Trading (Hardwick) complained to the information regulator after RAV's CEO denied their request for access to records relating to the distribution of royalty payments that [...]

Insights from the regulator

On Friday, 6 October, I listened in on an interesting interview with Adv Pansy Tlakula. She shared some interesting insights about the regulator's work, the status of certain enforcements and some projects they are working on. I decided to share [...]

POPIA Compliance Assessment | The regulator’s health check

What if I told you that the Information Regulator is fond of health checks? Would you envision something as scary (to many) as a tooth extraction or blood test, or would you envision what it actually is: a POPIA Compliance [...]

SAPS enforcement action | security compromise part 1

The information regulator issued its first enforcement notice to SAPS. After conducting an independent investigation, the regulator found that SAPS breached several conditions for the lawful processing of personal data. The regulator also found that SAPS failed to notify the [...]

Data protection fines in Africa

Data protection fines in Africa are on the rise as more authorities enforce compliance with data protection laws. Data protection authorities in Angola and Kenya have hit the ground running by enforcing data protection laws. In this article, we highlight [...]

National Department of Health enforcement action | Access to information

The South African Information Regulator (IR) has referred the National Department of Health (NDoH) to the enforcement committee because the NDoH has not provided information about personal data it collected during the COVID-19 pandemic. The regulator might issue an enforcement [...]