information security

Achieving information security compliance in South Africa’s public sector

South Africa has taken significant strides in promoting accountability in the public sector for information security compliance. The Protection of Personal Information Act (POPIA) and Promotion of Access to Information Act (PAIA) continue to be a major focus for the [...]

Secure data sharing

Navigating the world of data sharing can feel like traversing a minefield. But don't worry. We're here to provide a reliable map for data protection officers that leads to secure data-sharing practices. Understanding data sharing Data sharing involves data providers [...]

By |2023-04-04T21:41:52+02:00April 4th, 2023|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , |

Incident response training through roleplay

Picture this: You're in a dimly lit room, a mysterious figure lies dead on the floor, and you've got a room full of suspects. The culprit? A data breach, insider threat, or even a malicious malware attack. No, this isn't [...]

GDPR enforcement actions – March 2023

As the saying goes, "March comes in like a lion and goes out like a lamb". Regarding GDPR enforcement actions collated in March 2023, the lion has roared. Recent enforcement actions related to the General Data Protection Regulation (GDPR) in [...]

Safi v Gascoigne | BEC

In Safi v Gascoigne, Safi sued Gascoigne Randon and Associates, a conveyancing firm, for a loss of R889,308.50 from a business email compromise (BEC).  Who should care about this judgment and why? The public because they need to be aware [...]

Your duty of care regards information security

Every organisation has a duty of care to establish and maintain appropriate information security. The judgment in Hawarden vs ENS illustrates that no modern business can operate properly and lawfully without establishing and maintaining appropriate information security. The facts of [...]

Hawarden v Edward Nathan Sonnenbergs (ENS) | BEC

In Hawarden v Edward Nathan Sonnenbergs (ENS), Hawarden succeeded in suing ENS for the loss of R5.5 million because of a Business Email Compromise (BEC). Hawarden was ENS' client.  The court said that ENS owed a general duty of care [...]

Data Protection Law of Poland

Data protection laws are legal principles that have significantly impacted Poland as an EU-member state implementing the GDPR. Polish enforcement of data protection law has the potential to impact developing economies around the world. This is because Poland's economy is [...]

By |2022-11-08T21:17:10+02:00September 20th, 2022|Categories: POPI and Data Protection|Tags: , |

Lexing Insights | Legal framework for encryption tools

Initially used by military leaders and diplomats, cryptology has become an integral part of our daily lives since the advent of the Internet. This science of secret writing, which is divided into two types (cryptography and cryptanalysis), is today essential [...]

What to consider when planning legal training

Arranging legal training for your organisation may seem like an uninspiring or even overwhelming task. There are online and in-person workshops, the potential for e-learning, and numerous programmes to join but which option is right for your organisation? We know [...]

Encryption law or cryptography law in South Africa

There is some encryption law or cryptography law in South Africa. None prohibits its use, but cryptography providers or suppliers need to register with the Government. Users of cryptography products don't need to register. South Africa has a form [...]

By |2025-05-15T10:57:26+02:00November 25th, 2021|Categories: POPI and Data Protection|Tags: , , , |

How to use electronic signatures securely

Electronic signatures are getting a lot of attention at the moment with people across the world stuck at home due to the coronavirus without any other way to sign documents. This means that more and more documents are being signed [...]

By |2020-05-06T17:55:25+02:00May 4th, 2020|Categories: Electronic Signature Law|Tags: , |