Insights, news or developments related to the Information Regulator in South Africa, including updates on webinars or events held by them.
The information regulator published rules on the procedure a complainant should follow to submit a complaint to them. The rules set out detailed information on how the regulator will handle complaints. In this post, we summarise the rules, provide [...]
The information regulator issued a Guidance Note on application for Prior Authorisation (dated 11 March 2021) to guide responsible parties who are currently processing or intend to process personal information which is subject to prior authorisation to ensure compliance with [...]
On 13 October 2021, the information regulator invited comments on draft regulations that will amend the POPIA regulations, 2018. The draft regulations mainly cover new proposed rules of procedure, administrative fines, and other proposed amendments to the POPIA regulations. [...]
The information regulator has published a regulator PAIA manual template for both a public and a private body. The regulator is trying to help organisations create a manual themselves quickly and easily without having to pay a service provider [...]
The regulator published a guidance note on exemptions from the conditions for lawful processing of personal information in terms of Section 37 and 38 of POPIA on 21 June 2021. The guidance note helps those who intend to apply for [...]
The information regulator has published its annual performance plan for 1 April 2021 to 31 March 2022. It has also presented them in different formats to different audiences. For example, the regulator held a readiness stakeholder engagement on 15 June [...]
The information regulator has published a guidance note on information officers and deputy information officers to provide guidance, procedures and forms to enable responsible parties to do various things required by law. To save you time, we have summarised [...]
Data breach notification is both good business and required by law. What can we learn from the Regulator’s media statement on the Experian breach? Not if but when Commentators on cybersecurity warn “…it is not a question of if [...]
The information regulator has published a Readiness plan for the implementation of POPIA. Many people think that this might be a readiness plan that organisations can use to get ready for the POPIA deadline but unfortunately, it isn't. I got [...]
Data protection authorities around the world have started to do a data protection audit (or GDPR audit) on controllers to check that they comply with data protection law. Essentially, the authority compares your organisation to a data protection law that [...]
In Black Sash Trust v Minister of Social Development, the Constitutional Court agreed with the Information Regulator that data subjects own their personal information and that a responsible party cannot transfer the data subject's personal information to another party. [...]
In President of the Republic of South Africa v Office of the Public Protector, the Court confirmed the authority and powers of Chapter 9 Institutions. Similar to the Public Protector, the Information Regulator can also hold others accountable for their […]
