The Consumer Protection Act is a South African law that protects consumers from harm. It also creates significant compliance obligations for most businesses in South Africa. Read the practical implications and take action. The Consumer Protection Act came into [...]
The information regulator prescribed rules or regulations on the processing of health information under POPIA on 6 March 2026. The Health Information Regulations apply to specific responsible parties (not everyone) who process personal information concerning a data subject’s health for […]
The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]
The Information Regulator is taking enforcement action against FT Rams Consulting for non-compliance with section 69 of POPIA - the section that deals with direct marketing. This FT Ram Consulting fine of R200k follows a complaint from a data subject […]
The regulator has fined Blouberg Municipality R500 000 after a complaint from a former employee. This Blouberg Municipality enforcement action arose because the municipality unlawfully published the employee’s personal information on its website in a declaration of interest. As a […]
The Information Regulator was created by the Protection of Personal Information Act (POPI Act). POPI gives the Information Regulator teeth - it has extensive powers to investigate and fine responsible parties. Data subjects can complain to the Information Regulator, [...]
The regulator will publish a Guidance Note on Transborder Flows of Information to and from South Africa under POPIA. They will not wait for the finalisation of the African Continental Free Trade Agreement. They have been consulting with other authorities, [...]
Think of security compliance the way you think of a vehicle’s roadworthiness test. The certificate matters, but you only stay safe if the brakes still work today. POPIA's security requirement is not a maintenance checklist or a once-off project. POPIA […]
In Zulu Nyala Game Ranch v Christiaan Beukes, the High Court interdicted and ordered a former employee (Beukes) who used their employer's (Zulu Nyala Game Ranch) confidential customer database to start a competing business to stop using and delete it. […]
In August 2025, South Africa’s Information Regulator issued an enforcement notice against the Kudung Communal Property Association (Kudung CPA) for failing to provide access to requested records under the Promotion of Access to Information Act (PAIA). After Kudung CPA ignored […]
In Intengo Imoto v Zoutpansberg Motor Wholesalers, the Supreme Court of Appeal held that a purchaser (debtor) who falls victim to EFT fraud through email interception, paying into a fraudulent bank account, has not discharged its payment obligation to the […]
Artificial Intelligence in the South African financial Sector is a fast-growing use case. The way it will be regulated is noted in our earlier posts on the latest developments in AI regulation. South Africa will adopt a risk-based, technology-neutral and industry-specific [...]
