DORA compliance for vendors – a practical playbook

By |2025-11-14T19:33:31+02:00November 14th, 2025|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , , , |

DORA compliance for vendors is now a live requirement, and selling technology to European financial firms is therefore like constructing a new building in a crowded city: you must meet the code, welcome inspections, and prove the structure can take [...]

AI Policy Template and practical guidance for organisations

By |2025-11-14T17:27:43+02:00November 14th, 2025|Categories: AI Governance|Tags: |

An AI policy template for organisations is different from a National AI policy. A National policy outlines how a country plans to govern AI to advance its national interests. An organisational AI policy explains how your organisation uses AI, integrates [...]

King V Code published for application

By |2025-11-03T10:56:58+02:00October 31st, 2025|Categories: Data governance, Governance, Information Law|Tags: , , |

The final King V Code on corporate governance was published on 31 October 2025 by the Institute of Directors in Southern Africa (IoDSA). It is approximately 20 pages long and includes only the code (unlike previous versions, which also included [...]

AI Policy for Public Healthcare in the Western Cape

By |2025-10-24T14:18:50+02:00October 24th, 2025|Categories: AI Governance|Tags: , , |

The AI policy for public healthcare in the Western Cape (WCG) is in motion. The policy promotes the use of AI tools to address institutional capacity constraints and varying skill levels. Meaning that developers and deployers of AI-enabled healthcare tools [...]

Lexing Network is expanding into Africa | Join Lexing Africa

By |2025-10-13T15:19:05+02:00October 12th, 2025|Categories: Life@Law|Tags: , |

The Lexing Network is expanding into Africa and is looking for new members for Lexing Africa. If you're a good fit, we'd love to hear from you. The Lexing Network is an international network of lawyers dedicated to data, digital [...]

Department of Basic Education enforcement action | Consent

By |2025-10-30T11:45:49+02:00October 8th, 2025|Categories: POPI and Data Protection|Tags: , , , , , , |

The Information Regulator issued an enforcement notice against the Department of Basic Education (DBE) on the issue of consent under POPIA on 6 November 2024. The DBE has a long-standing practice of publishing matric results in newspapers, but this practice […]

Does your email disclaimer comply with the law?

By |2025-10-08T11:05:42+02:00October 7th, 2025|Categories: Email Law|Tags: , |

Your company almost certainly has an email disclaimer. Often, it is a huge block of text that appears at the bottom of an email, which nobody reads and just clutters up everyone’s inbox. At other times, it is incorporated by [...]

Anthropic AI copyright settlement clarifies fair use

By |2025-10-06T16:07:27+02:00October 6th, 2025|Categories: AI Governance, Intellectual Property Protection|Tags: , , , , , |

A U.S. district judge in the Anthropic AI copyright settlement clarifies the concept of fair use when it comes to AI training. In essence, AI developers may train AI on books that they lawfully acquire. The infringing act, however, is [...]

AI literacy is required by the EU AI Act

By |2025-10-02T11:37:19+02:00September 30th, 2025|Categories: AI Governance|Tags: , , |

AI literacy is essential to ensure people are competent and knowledgeable about AI. With some sections of the EU AI Act having taken effect on 2 February 2025, businesses and organisations should comply with a new requirement: ensuring the AI [...]

Truecaller enforcement action | Caller ID & spam blocking

By |2025-10-30T11:58:13+02:00September 28th, 2025|Categories: POPI and Data Protection|Tags: , |

The Information Regulator (Regulator) is investigating Truecaller. Data subjects complained about how, among other things, Truecaller processes personal information. There is currently no enforcement notice against Truecaller, but the investigation signals a shift. Data subjects in South Africa are actively […]