Gain insights on the latest regulatory updates related to digital, data and tech and what action they require of you by reading the latest updates (including alerts).
Only some are linked below. To read all previous insights and be alerted to future insights, join the relevant Michalsons programme. You can view the public and the “Members only” ones if you are a member and logged in.
The NCC published their draft guidelines for compliance with Opt-Out Registry regulations in Government Gazette No. 55465 on 2 October 2026. The guidelines explain how the Commission reads section 11 of the CPA and the 2026 Amendment Regulations. They [...]
No single source of law covers the regulation of social media in South Africa. Instead, several existing laws govern what people and businesses do on social media platforms. These laws protect freedom of expression while also addressing privacy, defamation, hate [...]
Kenya has introduced important new guidance for organisations transferring personal data across borders. On 8 September 2026, Kenya’s Office of the Data Protection Commissioner (ODPC) published its Guidance Notes for Cross-border Data Transfers, giving organisations more detailed direction on how […]
The regulatory and compliance landscape is continually evolving, raising new questions and challenges. We know you are working through our programmes and have many questions you would like answers to. This is why we’re allowing you to ask us any [...]
We bring you up to speed with our insights on the latest legal developments regarding digital, data and tech. We help you consider the practical actions you should take to sustain your compliance efforts. We filter out the noise for [...]
All private bodies must submit a PAIA section 83(4) report (PAIA report) to the Information Regulator in accordance with a notice published by the Regulator. The regulator has requested private bodies to submit this report annually in terms of [...]
The information officer of every public body in South Africa must submit a PAIA section 32 report to the Information Regulator annually. Section 32 of PAIA makes it compulsory - a regulatory requirement. PAIA gives effect to section 32 [...]
The new direct marketing regulations under the Consumer Protection Act have introduced one of the most significant compliance obligations marketers have faced in years. Businesses that engage in direct marketing are required to register on the National Consumer Commission (NCC) [...]
The Central Johannesburg TVET College enforcement action confirms that the Information Regulator will act when POPIA conditions are not met. On 22 May 2026, the Regulator issued its first formal enforcement notice of the year, following complaints lodged by employees [...]
South Africa has built one of the most detailed regulatory frameworks for cryptocurrency on the African continent. With innovative fintech players leading the way, more people are turning to cryptocurrency for payments, investments, and cross-border transfers. But with growth [...]
The NCC opt-out registry is a crisis for marketers. The new direct marketing regulations under the CPA may be one of the most burdensome compliance obligations marketers will face in years. Marketers must register, pay ongoing fees and opt people [...]
On 30 April 2026, the Information Regulator published the draft Gated Access Code of Conduct under POPIA. It applies to owners, managers, and their security and technology service providers at any gated premises, including residential estates and office parks. The [...]
