Legal updates and opinions
Search Author
Reviewing and updating your privacy notices
Transparency is one of the key principles for the lawful processing of personal information worldwide. If you collect and use people's personal information, you have most [...]
A double-edged sword: revenge porn and the Cybercrimes Act
Recently, South Africa has been experiencing a barrage of cyber-attacks and/or cyber-related/enabled crimes, with many individuals and organisations being caught flat-footed. [1] In 2021, South Africa [...]
Code of conduct of the Banking Association of South Africa: Finally approved
We have, on multiple occasions, published articles on the Banking Association of South Africa's (BASA) code of conduct. On 11 June 2021, the Information Regulator published [...]
The right of access to information vs. The right to privacy
The right of access to information is a unique right in the Constitution of the Republic of South Africa, 1996 as it places an obligation on [...]
When the walls fall in
Ring-a-round the rosie, A pocket full of posies, Ashes! Ashes! We all fall down The Information Regulator has officially made her presence known. The Enforcement Committee [...]
Not every crime is a cybercrime – The dichotomy of cyber-enabled crimes and cybercrimes
The global adoption of digital technology is rapidly increasing, which increase has caused an evolution in criminal behaviour resulting in the increased occurrence of cyberattacks on [...]
Road block ahead! Are data protection laws stifling technological innovation?
by Ahmore Burger-Smidt, Head of Data Privacy and Cybercrime Practice, and Siyabonga Galela, Candidate Attorney Oh, where the time has gone! It has been four years since the [...]
Sticks, straws and bricks: POPIA compliance strategy & governance framework
The Protection of Personal Information Act, 4 of 2013 (POPIA) is now over a year in full effect. Indeed, the POPIA compliance process has not come [...]
POPIA and consent, the biggest misunderstanding?
“Sometimes you have to travel a long way to find what is near” Paulo Coelho It has been over a year since the compliance deadline of [...]
Fake news – The three sisters: Mis, Dis and Mal.
by Ahmore Burger-Smidt, Head of Data Privacy and Cybercrime Practice, and Siyabonga Galela, Candidate Attorney Fake news Introduction The Fourth Industrial Revolution (colloquially referred to as [...]
Affected persons are invited – again – to provide comments on The Code of Conduct for The Banking Association of SA
On 24 June 2022, the Information Regulator of South Africa (Information Regulator) published a notice in terms of section 61(2) of the Protection of Personal Information [...]
Can’t make head or tail of POPIA? Lessons from Sheburi V Rail Safety Regulator
The Protection of Personal Information Act 4 of 2013 The Protection of Personal Information Act 4 of 2013 ("POPIA") came into full effect on 1 July [...]
Paint-by-numbers: Competition law litigation against Google and Meta
Online Intermediation Platforms Market Inquiry Is it with bated breath that one should await the outcome of the Online Intermediation Platforms Market Inquiry conducted by the [...]
Code of conduct of the Banking Association of South Africa: What we know
Codes of conduct focused on the processing of personal information by Ahmore Burger-Smidt, Director and Head of Data Privacy and Cybercrime Practice and member of the [...]
Data protection and privacy regulation: A roundup of developments in Africa in 2021
Data protection, cybercrimes and/or cybersecurity laws The increase in internet penetration in Africa has made it easier to collect, use and share large quantities of personal [...]
The metaverse and data privacy: Will regulation keep up?
What is the metaverse? On 28 October 2021, Facebook Inc.'s chief executive officer Mark Zuckerberg announced the rebranding of his company to Meta. More importantly though, [...]
The PAIA and POPIA dichotomy: What information are you requesting?
Promotion of Access to Information Act, 2 of 2000 We have received numerous queries from clients seeking advice on attending to requests in terms of the [...]
Data protection impact assessment required despite “Might of the State”
Kenyan High Court Introduction On 14 October 2021, the Kenyan High Court declared the collection of biometric information and the rollout of the country's digital ID [...]
Your Actions in Cyberspace can Land You in Prison!
Cybercrimes Act, 19 of 2020 By proclamation in the Gazette, President Cyril Ramaphosa has fixed 1 December 2021 as the date on which certain sections of the [...]
Finally, my little eye spies a PAIA Guide!
Promotion of Access to Information Act 2 of 2000 The 28th of September was declared by UNESCO in 2019, as The International Day for Universal Access [...]
Data breaches: to notify, or not to notify, that is the question
Data breaches We have had a number of clients approach us on the issue of security compromises or "data breaches" and have quickly come to learn [...]
Jacob Zuma’s medical records: off limits or fair game
Jacob Zuma's medical records Discussions around medical records have taken centre stage at former president Jacob Zuma's trial for corruption, fraud and racketeering emanating from the [...]
Notification of data breaches… setting the record straight
Report data breaches "We reminded them of their duty to report any breach in data security to us. The report they sent us was very general [...]
“I will never get caught”: The consequences of non-compliance with POPIA
Non-compliance with POPIA With the attention on complying with the Protection of Personal of Personal Information Act No. 4 of 2013 ("POPIA") by 1 July 2021 [...]
Obtaining authorisation to process special personal information demystified
1. Processing of Special Personal Information On 28 June 2021, the Information Regulator published its "Guidance Note on Processing of Special Personal Information"' ("Guidance Note"). Self-evidently [...]
