Gain insights on the latest regulatory updates related to digital, data and tech and what action they require of you by reading the latest updates (including alerts).
Only some are linked below. To read all previous insights and be alerted to future insights, join the relevant Michalsons programme. You can view the public and the “Members only” ones if you are a member and logged in.
The new direct marketing regulations under the Consumer Protection Act have introduced one of the most significant compliance obligations marketers have faced in years. Businesses that engage in direct marketing are required to register on the National Consumer Commission (NCC) [...]
The Central Johannesburg TVET College enforcement action confirms that the Information Regulator will act when POPIA conditions are not met. On 22 May 2026, the Regulator issued its first formal enforcement notice of the year, following complaints lodged by employees [...]
South Africa has built one of the most detailed regulatory frameworks for cryptocurrency on the African continent. With innovative fintech players leading the way, more people are turning to cryptocurrency for payments, investments, and cross-border transfers. But with growth [...]
The NCC opt-out registry is a crisis for marketers. The new direct marketing regulations under the CPA may be one of the most burdensome compliance obligations marketers will face in years. Marketers must register, pay ongoing fees and opt people [...]
On 30 April 2026, the Information Regulator published the draft Gated Access Code of Conduct under POPIA. It applies to owners, managers, and their security and technology service providers at any gated premises, including residential estates and office parks. The [...]
The regulatory and compliance landscape is continually evolving, raising new questions and challenges. We know you are working through our programmes and have many questions you would like answers to. This is why we’re allowing you to ask us any [...]
All private bodies must submit a PAIA section 83(4) report (PAIA report) to the information regulator according to a notice the regulator published. The regulator has requested private bodies to submit this report annually in terms of section 83(4) [...]
PSiRA may expand its regulation of cybersecurity services in South Africa. What would this mean for cybersecurity service providers? How do you, as a cybersecurity service provider, feel about being regulated by the Private Security Industry Regulatory Authority (PSiRA)? PSiRA, [...]
The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]
We bring you up to speed with our insights on the latest legal developments regarding digital, data and tech. We help you consider the practical actions you should take to sustain your compliance efforts. We filter out the noise for [...]
Artificial Intelligence in the South African financial Sector is a fast-growing use case. The way it will be regulated is noted in our earlier posts on the latest developments in AI regulation. South Africa will adopt a risk-based, technology-neutral and industry-specific [...]
There will be no standalone South African AI Act. Instead, South Africa will have a sector-specific, risk-based approach to AI regulation. This approach aligns with international best practices followed by the UK and Australia, which seek to use existing laws [...]
