Beyond consent: Better grounds for processing personal data

By |2026-09-30T14:00:25+02:00February 20th, 2025|Categories: POPI and Data Protection|Tags: , , , |

Today, processing personal data is not just a technical matter; it is a legal requirement governed by strict rules. Relevant data protection laws generally state that every data processing activity must have a legal basis. Although many believe consent is [...]

Access to Information Manual | Draft or review

By |2025-09-09T20:13:45+02:00February 18th, 2025|Categories: Access to Information|Tags: , |

Do you need an Access to Information manual? What is it anyway? The Promotion of Access to Information Act (PAIA) says that all public and private bodies in South Africa need to create a manual that contains, amongst other things: [...]

Concepts of controller and processor – do you really know your processing role?

By |2026-01-13T00:17:12+02:00February 17th, 2025|Categories: POPI and Data Protection|Tags: , , , , , , |

Did you know that your role can change from processor to controller and back again? This is a crucial concept to understand under the General Data Protection Regulation (GDPR). In a chain of processing activities, a controller and processor's role [...]

PAIA compliance assessments by information regulator

By |2025-03-04T14:40:18+02:00February 12th, 2025|Categories: Access to Information|Tags: , , , , |

South Africa’s Information Regulator conducts PAIA compliance assessments on public and private bodies in terms of section 77H of the Promotion of Access to Information Act (PAIA). PAIA plays a crucial role in an organisation's transparency and accountability to the [...]

How POPIA affects AI

By |2025-01-31T17:14:00+02:00January 31st, 2025|Categories: POPI and Data Protection|Tags: , , |

Artificial intelligence is transforming industries, but South Africa’s Protection of Personal Information Act (POPIA) sets clear rules for AI systems that process personal data. Businesses and organisations using AI must follow POPIA’s data protection principles to avoid legal risks and [...]

Matric results leak | Data breach

By |2025-01-31T11:35:22+02:00January 31st, 2025|Categories: POPI and Data Protection|Tags: , |

The recent matric results leak has raised serious concerns about data security and unauthorised access to student information. The breach, involving the early release of National Senior Certificate (NSC) results, has led to a criminal investigation and regulatory intervention. Here’s [...]

Book on Rules by Eisen | Respectful Policies and Directives

By |2025-08-18T09:27:43+02:00January 22nd, 2025|Categories: Governance, IT Law, POPI and Data Protection|Tags: , , |

As a lawyer, I’ve encountered many policies over many years. I’ve read, reviewed, interpreted, and drafted them. I now realise that they were almost all horrible. I’ve seen the light and woken up to a whole new world. The light [...]

Copyright Amendment Bill and Publishers: What’s happening so far

By |2025-06-09T22:50:35+02:00January 22nd, 2025|Categories: Intellectual Property Protection, Media Law, Tech Law|Tags: , , , |

The Copyright Amendment Bill will have a significant impact on publishers. The bill aims to strike a balance between creators’ rights and the public's access to copyrighted works. While the bill includes some much-needed updates, it has sparked considerable debate [...]

The law in 2025 – our predictions

By |2025-01-27T14:16:10+02:00January 20th, 2025|Categories: Life@Law|Tags: , , , , , , , |

Welcome to the law in 2025! At the beginning of each year, we gaze into the future to help you prioritise your next steps. This is the law regarding digital, data and tech in 2025. We try to predict what [...]

Loot boxes in South African Law

By |2025-06-09T22:47:54+02:00January 20th, 2025|Categories: Consumer Protection, Digital Entertainment Law|

Loot boxes are a popular mechanic in many video games. If you haven't been living under a rock for the past few years, you will have likely heard that Loot Boxes are quite problematic worldwide.  These items, often purchased with [...]

Botswana Data Protection Act comes into effect

By |2025-06-09T16:33:57+02:00January 20th, 2025|Categories: POPI and Data Protection|Tags: , , , , , |

The Botswana Data Protection Act, 2024 (the new Act) has officially come into effect on 14 January 2025 after the Data Protection Act of 2018 (the 2018 Act) was repealed after facing multiple delays since its transition in 2021. The [...]