Information Regulator

Insights, news or developments related to the Information Regulator in South Africa, including updates on webinars or events held by them.

RAV enforcement action | Royalty payments

The information regulator issued its first PAIA enforcement notice to Risa Audio Visual (RAV). Hardwick Trading (Hardwick) complained to the information regulator after RAV's CEO denied their request for access to records relating to the distribution of royalty payments that [...]

Insights from the regulator

On Friday, 6 October, I listened in on an interesting interview with Adv Pansy Tlakula. She shared some interesting insights about the regulator's work, the status of certain enforcements and some projects they are working on. I decided to share [...]

POPIA Compliance Assessment | The regulator’s health check

What if I told you that the Information Regulator is fond of health checks? Would you envision something as scary (to many) as a tooth extraction or blood test, or would you envision what it actually is: a POPIA Compliance [...]

SAPS enforcement action | security compromise part 1

The information regulator issued its first enforcement notice to SAPS. After conducting an independent investigation, the regulator found that SAPS breached several conditions for the lawful processing of personal data. The regulator also found that SAPS failed to notify the [...]

Data protection fines in Africa

Data protection fines in Africa are on the rise as more authorities enforce compliance with data protection laws. Data protection authorities in Angola and Kenya have hit the ground running by enforcing data protection laws. In this article, we highlight [...]

Webinar | Interacting with the Information Regulator

Responsible parties in South Africa should work with (not against) the Information Regulator. To support this, we at Michalsons have arranged a public webinar with the regulator. Join us to learn how and get answers to your questions.  The regulator [...]

Webinar | Knowing the different notices the information regulator can issue

The information regulator has a dual mandate to enforce the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA). These Acts allow for the regulator to issue certain notices to help them monitor and [...]

National Department of Health enforcement action | Access to information

The South African Information Regulator (IR) has referred the National Department of Health (NDoH) to the enforcement committee because the NDoH has not provided information about personal data it collected during the COVID-19 pandemic. The regulator might issue an enforcement [...]

How to make the Information Regulator happy with your organisation

Picture yourself sitting on your couch at home, causally flicking through channels. The Information Regulator and data protection are the last things on your mind; and yet there you are, stumbling onto a press conference the Information Regulator is doing. [...]

Information regulator strategic plan for 2022/3 to 2026/7 – a heads up

The information regulator released the Information Regulator Strategic Plan for 2022/3 to 2026/7. The plan outlines the steps that the regulator will take to implement its vision for 2027. The regulator's key focus is to fulfil its dual mandate as [...]

Infringement notice from the Information Regulator: what now?

The information regulator will serve an infringement notice to a responsible party that the regulator believes has breached a provision of POPIA. No responsible party wants to receive an infringement notice or enforcement notice. It is even more intimidating than [...]

Information notice from the Information Regulator: what now?

If you've heard about or received an information notice from the information regulator, you may be wondering what it is and whether it's harmless. The truth is there's a lot for you to consider and action that you will need [...]