What is a private body or organisation?

By |2026-05-11T15:56:01+02:00May 10th, 2026|Categories: Access to Information, Company Law, POPI and Data Protection|Tags: , |

The law treats a private body differently from a public body, so it is essential that you know the difference. Some laws (like POPIA and PAIA) require private bodies to do specific things (like submit a PAIA report). You can [...]

Loyalty programmes and the law

By |2026-05-12T21:24:27+02:00May 10th, 2026|Categories: Consumer Protection|Tags: , , , |

Loyalty programmes are everywhere - freebies, added benefits and loyalty schemes. Loyalty programmes, credits and schemes incentivise consumers to stay loyal to certain brands, retail outlets, airlines, banks, cellular providers and many other suppliers of goods and services. As [...]

NCC opt-out registry is a crisis for marketers

By |2026-10-29T08:47:50+02:00May 7th, 2026|Categories: Consumer Protection, Electronic Communications Law, Marketing Law, POPI and Data Protection|Tags: , , , , , , |

The NCC opt-out registry is a crisis for marketers. The new direct marketing regulations under the CPA may be one of the most burdensome compliance obligations marketers will face in years. Marketers must register, pay ongoing fees and opt people [...]

Eskom v Afriforum | Access to contracts

By |2026-05-06T15:59:28+02:00May 6th, 2026|Categories: Access to Information, Contracts|Tags: , , , , , |

In Eskom v AfriForum, the Supreme Court of Appeal dismissed Eskom’s appeal and ordered it to disclose its coal and diesel contracts to AfriForum. The Court confirmed that under the Promotion of Access to Information Act 2 of 2000, access […]

Legal requirements for an enforceable disclaimer

By |2026-05-06T15:48:43+02:00May 6th, 2026|Categories: Contracts|Tags: , , |

Disclaimers, if you have one, you want it to be enforceable so it can protect you from liability. What are the legal requirements for an enforceable disclaimer? Before we get into that, let's talk about what a disclaimer actually does. [...]

Gated Access Code of Conduct under POPIA

By |2026-06-23T15:42:55+02:00May 5th, 2026|Categories: Cybersecurity Law, POPI and Data Protection|Tags: , , |

On 30 April 2026, the Information Regulator published the draft Gated Access Code of Conduct under POPIA. It applies to owners, managers, and their security and technology service providers at any gated premises, including residential estates and office parks. The [...]

Standard Bank | Data breach

By |2026-04-29T10:58:20+02:00April 29th, 2026|Categories: Cybercrime, Cybersecurity Law, POPI and Data Protection|Tags: , , , , , |

Standard Bank, Africa’s largest bank, has disclosed a data breach affecting a number of its clients. This raises concerns about rising cybersecurity risks across South Africa’s financial sector. Standard Bank directly communicated with their clients and confirmed that someone had […]

Draft South Africa National AI Policy published for comment

By |2026-10-13T15:04:57+02:00April 10th, 2026|Categories: AI Governance, Public Policy|Tags: , , , |

The Draft South Africa National AI Policy was approved by Cabinet and gazetted on 10 April 2026, with a 60-day public comment period ending on 10 June 2026. The final version was due by March 2027, with sector-specific strategies [...]

Workplace AI governance controls – A policy that actually works

By |2026-04-08T22:08:31+02:00April 8th, 2026|Categories: AI Governance|Tags: , |

Let's talk workplace AI governance controls. A good AI policy functions like traffic lights. It doesn't stop people from acting, but prevents accidents. Staff already use chatbots, drafting tools, coding assistants, and AI features integrated into everyday office software. [...]

Complying with RICA – a guide for organisations

By |2026-03-26T16:52:31+02:00March 25th, 2026|Categories: Electronic Communications Law, Monitoring Law|Tags: , , |

RICA stands for the Regulation of Interception of Communications and Provision of Communication Related Information Act 70 of 2002, and finally came into effect on 30 September 2005. RICA is the piece of South African legislation that governs the interception [...]

OUTsurance enforcement action | Direct live call marketing

By |2026-03-26T12:02:27+02:00March 25th, 2026|Categories: POPI and Data Protection|Tags: , , , , , |

Direct marketing is under scrutiny as South Africa’s Information Regulator takes enforcement action against OUTsurance following an investigation into its direct live-call marketing practices. The case could become a landmark test of whether live telephone calls fall under section 69 […]

Does POPIA apply to journalists? Generally, no.

By |2026-03-19T16:51:06+02:00March 18th, 2026|Categories: Media Law, POPI and Data Protection|Tags: , , , , |

Does POPIA apply to journalists? If POPIA does not apply to you, what must you consider when processing personal information? These are two important questions to ask if you are a journalist who has concerns about the personal information you [...]