You've probably come across a clickwrap agreement without even realising it. Some people call this the click-through contracting model. It is a quick method for users and consumers to agree to the terms of service providers. Technology has made buying [...]
Navigating an IT agreement is like piecing together a jigsaw puzzle. It's multi-layered, intricate, and prone to missing connections. In the age of digital contracts, order of precedence is important. Think about it: IT contracts are complex and can span [...]
Information Regulator ramps up enforcement: on 1 September 2026, the Information Regulator briefed the public and media on its latest enforcement and compliance activities under POPIA and PAIA. The briefing shows the Regulator is increasingly concerned about South Africa's cybersecurity [...]
All private bodies must submit a PAIA section 83(4) report (PAIA report) to the Information Regulator in accordance with a notice published by the Regulator. The regulator has requested private bodies to submit this report annually in terms of [...]
The information officer of every public body in South Africa must submit a PAIA section 32 report to the Information Regulator annually. Section 32 of PAIA makes it compulsory - a regulatory requirement. PAIA gives effect to section 32 [...]
A company group with a subsidiary in the EU decides that the cloud SaaS platform it has used for years is no longer the right fit. EU Data Act switching rules now shape what happens next. Legal counsel is asked [...]
In Mashashane v SABC, the Gauteng Local Division considered an urgent application under the Promotion of Access to Information Act 2 of 2000 (PAIA). Mashashane, the applicant, sought to compel the SABC to disclose a copy of an old Speak […]
A security addendum arrives from a customer. They want incident notification within 24 hours, the right to audit you on site, approval before you change a subcontractor, and cooperation with their penetration testing. These are cybersecurity flow-down clauses: contractual terms [...]
Parliament has invited the organisations and interested individuals to nominate people (or apply themselves) for the President to appoint as members of the information regulator. Do you want to nominate someone? Do you know anyone who might want to nominate [...]
You want your clients to trust you, and being transparent through an AI use declaration is one way to foster that trust. The truth is, you use AI in some or most of your workflows. Your clients already know this, [...]
If a complainant lodges a complaint against you for infringing their privacy rights, the information regulator can issue any one of a few types of notices to you. For example, you could receive an information notice, an enforcement notice, or [...]
The Information Regulator may send you a POPIA enforcement notice after investigating you and finding that you have contravened POPIA by failing to lawfully process personal information. In comparison, the Information Regulator may send you an infringement notice if it [...]
