Data protection Insights

How do I register on the Information Regulator portal?
Gallery
How do I register on the Information Regulator portal?

How do I register on the Information Regulator portal?

All organisations should register on the Information Regulator portal as soon as possible. This applies to any organisation domiciled in South Africa or processing personal information in South Africa. Failing to register your information officer is not a criminal [...]

By John Giles|2026-02-04T12:55:18+02:00February 2nd, 2026|Categories: Access to information, Information officer, POPIA|

Who does the Data and Cloud Policy apply to?

The policy applies to the government, its service providers, and private entities processing government data.

By Michalsons|2024-11-28T16:59:22+02:00November 28th, 2024|Categories: Data protection, Policies|

What is the difference between a policy intervention and a policy proposal?

Policy interventions are actions the government is currently implementing, while proposals are suggestions for future actions.

By Michalsons|2024-11-28T13:07:54+02:00November 28th, 2024|Categories: Data protection|

Is there a standard definition of what a ‘cloud’ is?

The National Institute of Standards and Technology (NIST) defines cloud computing as "a model for enabling ubiquitous, convenient, and on-demand network access to a shared pool of configurable resources (e.g., networks, servers, storage, applications, and services) that can be rapidly [...]

By Michalsons|2024-11-28T13:06:38+02:00November 28th, 2024|Categories: Data protection|

Who should be the designated or deputy information officer?
Gallery
Who should be the designated or deputy information officer?

Who should be the designated or deputy information officer?

Now, there is a question. It depends on the organisation, but often, it is someone in legal or compliance. But no formal qualifications are required by law. It is essential that the person you select as your information officer (IO) [...]

By John Giles|2024-09-04T10:54:11+02:00August 20th, 2024|Categories: Access to information, Information officer|

What is the difference between information security and data protection?

Information security is a more comprehensive approach to safeguarding all types of information. Data protection really focuses on personal data or sensitive data.

By Michalsons|2024-04-16T11:29:48+02:00April 16th, 2024|Categories: Breach, Data protection, Information security, POPIA|

What is the difference between POPIA and PAIA?

POPIA aims to protect the privacy and security of personal information processed by public and private bodies. It sets out conditions for the lawful collection, use, storage, and destruction of personal information. PAIA aims to give effect to the constitutional [...]

By Lisa Emma-Iwuoha|2024-03-26T08:48:36+02:00March 26th, 2024|Categories: Access to information, POPIA|

Does the information regulator communicate with other regulators to ensure its compliance with adequate safeguarding measures?

The Information Regulator (IR) does communicate with other regulators but because each regulator has its own mandates, the IR is confined to the parameters of POPI and PAIA and anything that falls outside the four corners of these Acts will [...]

By Refilwe Motsoeneng|2024-03-22T11:37:17+02:00March 22nd, 2024|Categories: Data protection, Information regulator, POPIA|

What are the information regulator’s plans to work with other regulators in ensuring alignment in inputs on the standard frameworks and policies that will cover cybercrimes?

The initial difficulty that South Africa is facing is that it does not have a cybercrimes commission. At present, the Information Regulator works closely with the police and the Hawks but uses its own processes separate to those used by [...]

By Refilwe Motsoeneng|2024-03-22T11:28:35+02:00March 22nd, 2024|Categories: Cybercrime, Information regulator|

What role will the information regulator play in terms of the Cybersecurity Act?

The Information Regulator will have a similar role with the Cybersecurity Act as it does now when receiving data breach notifications. A data breach is usually occurring at the same time as when a cybercrime is happening. The difficulty with [...]

By Refilwe Motsoeneng|2024-03-22T11:23:09+02:00March 22nd, 2024|Categories: Cybercrime, Information regulator|

Will the information regulator issue updated guidance on prior authorisation?

The Information Regulator plans to clarify its updates on prior authorisation such as making application forms easier to use, in an upcoming guidance note. When dealing with personal information, remember to consider it in a holistic point of view. There [...]

By Refilwe Motsoeneng|2024-03-22T11:17:54+02:00March 22nd, 2024|Categories: Information regulator, POPIA|

What does the information regulator look for during a POPIA or PAIA compliance assessment?

The Information Regulator (IR) has discretion in when to assess organisations' data processing practices under both POPIA and PAIA. They follow prescribed procedures and inform applicants about the scope and reasons for the assessment. For POPIA assessments, factors considered include [...]

By Refilwe Motsoeneng|2024-03-22T11:08:04+02:00March 22nd, 2024|Categories: Access to information, Information regulator, POPIA|