In Mashashane v SABC, the Gauteng Local Division considered an urgent application under the Promotion of Access to Information Act 2 of 2000 (PAIA). Mashashane, the applicant, sought to compel the SABC to disclose a copy of an old Speak […]
A security addendum arrives from a customer. They want incident notification within 24 hours, the right to audit you on site, approval before you change a subcontractor, and cooperation with their penetration testing. These are cybersecurity flow-down clauses: contractual terms [...]
Parliament has invited the organisations and interested individuals to nominate people (or apply themselves) for the President to appoint as members of the information regulator. Do you want to nominate someone? Do you know anyone who might want to nominate [...]
You want your clients to trust you, and being transparent through an AI use declaration is one way to foster that trust. The truth is, you use AI in some or most of your workflows. Your clients already know this, [...]
If a complainant lodges a complaint against you for infringing their privacy rights, the information regulator can issue any one of a few types of notices to you. For example, you could receive an information notice, an enforcement notice, or [...]
The Information Regulator may send you a POPIA enforcement notice after investigating you and finding that you have contravened POPIA by failing to lawfully process personal information. In comparison, the Information Regulator may send you an infringement notice if it [...]
You use AI in almost everything you do, so you want to know how to use AI to instruct your lawyer. We are glad that you are finding ways to leverage this technology, and we encourage you to do so. [...]
Almost certainly not. If you receive an email telling you that your brand or trademark is being registered in China, it is almost certainly a hoax or a scam. The Chinese domain name scam changes over time but is [...]
If you are a marketer or brand activator who uses promotional competitions or prize draws to promote in South Africa, you need to comply with the Consumer Protection Act (CPA) requirements in section 36 and Regulation 11. We can help [...]
In Mudau and Netshipise Attorneys v Information Officer for the CCMA, the Gauteng Local Division held that a public body's failure to respond to a PAIA request within the prescribed 30-day period constitutes a deemed refusal under Section 27 of […]
The Promotion of Access to Information Act (PAIA) states that the head of a private body is the Information Officer, and they should compile a PAIA manual for the private body and update the manual regularly (unless exempt). According to […]
Who must appoint a DPO? What does the General Data Protection Regulation (GDPR) require regarding a Data Protection Officer (or DPO)? This is one of the questions that the GDPR, adopted by the European Parliament in 2016, has prompted many organisations to ask. Another [...]
