Data protection Insights

What are some of the information regulator’s strategies for dealing with a criminal situation when contacting the police is not an option?

The information regulator would like to clarify that it is not a cybercrime agency and does not investigate cybercrimes. They do concede that there is a need for a cybercrime agency to assist in the regulation of cybercrimes in the [...]

By Refilwe Motsoeneng|2024-03-22T10:24:38+02:00March 22nd, 2024|Categories: Cybercrime, Information regulator|

What rules apply when sending data to EU countries?

The rules that apply to when sending data to EU countries is not straightforward. The person who is sending that data will have to make an assessment as to whether making a transfer to the intended country has the appropriate [...]

By Refilwe Motsoeneng|2024-03-22T10:03:32+02:00March 22nd, 2024|Categories: Data protection, Information regulator, POPIA|

Will the information regulator implement any new safeguards regarding cross-border transfers?

There is a need for new safeguards the regulation to cater to a manageable way of dealing with cross-border flows. The Information Regulator has decided not to develop a white list because it would be quite challenging to review and [...]

By Refilwe Motsoeneng|2024-03-19T14:52:32+02:00March 19th, 2024|Categories: POPIA|

What are the information regulator’s plans regarding AI?

While the Information Regulator (IR)'s plan is to keep an eye on international developments regarding AI regulation, AI is not an immediate priority for the Information Regulator right now. Their current focus lies on amending existing legislation like POPI and [...]

By Refilwe Motsoeneng|2024-03-26T08:23:03+02:00March 19th, 2024|Categories: Cybercrime, Information regulator, POPIA, Trustworthy AI|

What are the information regulator’s key priorities for 2024?

There are several issues that the information regulator is aiming to address this year. Still, the two key priorities are addressing concerns around AI and automated decisions and regulating cross-border transfers of personal information. AI and automated decision-making: international data [...]

By Refilwe Motsoeneng|2024-02-29T11:39:44+02:00February 29th, 2024|Categories: Information regulator, POPIA, Trustworthy AI|

Is Google Analytics unlawful?

In South Africa, the regulator hasn't made a statement about the legality of Google Analytics. In the EU, some authorities have deemed it unlawful.

By Michalsons|2024-04-16T11:29:53+02:00February 28th, 2024|Categories: Breach, Data protection|

What is the difference between cookies and pixels?

The key difference is who's doing the tracking: cookies are used by third-party ad tools, while pixels are used by the website itself. Cookies are like messengers between websites and your web browser. You can control and delete them through [...]

By Michalsons|2024-03-25T14:26:56+02:00February 28th, 2024|Categories: Breach, Data protection|

What should you do when your information officer resigns?
Gallery
What should you do when your information officer resigns?

What should you do when your information officer resigns?

At some point, your information officer is bound to leave your organisation. It might be the default, authorised, designated, delegated or deputy information officer. These are the steps you can take if your information officer wants to resign. Your information [...]

By Michalsons|2024-03-26T08:27:02+02:00September 2nd, 2022|Categories: Access to information, Information officer|

Has the regulator issued guidance on the third party countries with an adequate level of protection?

The Information Regulator confirmed in the webinar on prior authorisation on 27 October 2021, that it will not release a list of countries with an adequate level of protection. They further said that it is for the Responsible Party to [...]

By Michalsons|2025-02-05T11:28:36+02:00November 4th, 2021|Categories: Prior authorisation|

How do I get prior authorisation from the regulator?
Gallery
How do I get prior authorisation from the regulator?

How do I get prior authorisation from the regulator?

If you have determined that your organisation needs to get prior authorisation, the next question is how do you apply? Who do you send the application form for prior authorisation to? It is like applying for your license - you [...]

By John Giles|2024-08-21T15:48:01+02:00September 1st, 2021|Categories: Information regulator, POPIA, Prior authorisation|

Who needs to get prior authorisation from the information regulator?
Gallery
Who needs to get prior authorisation from the information regulator?

Who needs to get prior authorisation from the information regulator?

You need prior authorisation from the information regulator if your organisations is a responsible party that plans to do certain specified things. Note that operators don’t need get prior authorisation, only responsible parties. Do you know what role you play [...]

By John Giles|2021-09-24T10:13:39+02:00September 1st, 2021|Categories: Information regulator, Prior authorisation|

Does POPIA apply retrospectively?
Gallery
Does POPIA apply retrospectively?

Does POPIA apply retrospectively?

No, it doesn't but there are a few things to think about. POPIA does not apply to your processing of personal information that happened before it commenced on 1 July 2020. For example, if you collected personal information on 1 [...]

By John Giles|2022-11-15T19:38:30+02:00July 20th, 2021|Categories: POPIA|