The Information Regulator’s preliminary investigation report reveals that Gauteng Premier Panyaza Lesufi did not provide adequate reasons for refusing the Democratic Alliance (DA) access to 177 forensic reports from 2016 to date. The investigation is ongoing. If a body wants […]
The Ayinde v London Borough of Haringey judgment highlights the risks of using generative AI for legal research. It shows why lawyers must apply proper judgment. The English High Court considered matters in which lawyers had submitted AI-generated hallucinations to […]
In Mashashane v SABC, the Gauteng Local Division considered an urgent application under the Promotion of Access to Information Act 2 of 2000 (PAIA). Mashashane, the applicant, sought to compel the SABC to disclose a copy of an old Speak […]
In Mudau and Netshipise Attorneys v Information Officer for the CCMA, the Gauteng Local Division held that a public body's failure to respond to a PAIA request within the prescribed 30-day period constitutes a deemed refusal under Section 27 of […]
The Promotion of Access to Information Act (PAIA) states that the head of a private body is the Information Officer, and they should compile a PAIA manual for the private body and update the manual regularly (unless exempt). According to […]
Sibanye-Stillwater enforcement action was taken by the Information Regulator, who issued a PAIA enforcement notice against the company on 22 May 2026 after Sibanye refused access to its Social and Labour Plan (SLP) compliance reports. The Information Regulator found that […]
The Gauteng Department of Health enforcement action issued by the Information Regulator on 8 June 2026, directs the Department to disclose records requested by the Complainant under PAIA. The records relate to the investigation of the assassination of Babita Deokaran. […]
In Eskom v AfriForum, the Supreme Court of Appeal dismissed Eskom’s appeal and ordered it to disclose its coal and diesel contracts to AfriForum. The Court confirmed that under the Promotion of Access to Information Act 2 of 2000, access […]
Standard Bank, Africa’s largest bank, has disclosed a data breach affecting a number of its clients. This raises concerns about rising cybersecurity risks across South Africa’s financial sector. Standard Bank directly communicated with their clients and confirmed that someone had […]
Direct marketing is under scrutiny as South Africa’s Information Regulator takes enforcement action against OUTsurance following an investigation into its direct live-call marketing practices. The case could become a landmark test of whether live telephone calls fall under section 69 […]
The Liquid Telecom enforcement action regarding recording meeting without consent arises from a decision where Kenya’s data protection regulator fined Liquid Telecommunications Kenya 700,000 Kenyan Shillings for unlawfully recording and retaining a former executive's Zoom meeting without consent. The ruling […]
The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]
