South Africa: Privacy

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Data Governance Is Not AI Governance
While organisations invest heavily in data governance frameworks to manage information security and compliance, a critical gap is emerging: the assumption that governing data automatically means governing the AI systems that use it. This article examines why data governance and AI governance are distinct disciplines, exploring the unique risks that arise when AI operates faster than the governance structures designed to control it...
South Africa Privacy
E
ENS
Article
Checkout, But Make It AI: Legal Considerations For Shopping Agents
As artificial intelligence shopping agents evolve from simple search tools to autonomous purchasing assistants, South African businesses face critical questions about data collection, consumer protection, and legal responsibility that existing frameworks like POPIA were never designed to address. How should organisations navigate AI disclosure requirements, handle voluntarily shared sensitive information, and establish governance protocols when their chatbots can independently compare products, personalise
South Africa Privacy
E
ENS
Article
The Bot In The Room: Does Automated Access Trigger POPIA's Breach Notification?
South African data protection law requires organisations to notify regulators and affected individuals when personal information is accessed or acquired by unauthorised persons, but what exactly constitutes "access," "acquisition," or "reasonable grounds to believe" a breach has occurred? This analysis examines these undefined legal concepts through the lens of established cybersecurity frameworks and digital forensics practices, exploring how they apply to modern cyber-attacks and automated tools in the co
South Africa Privacy
E
ENS
See more

Related Country Guides

DP
Data Privacy

Data Protection

Article
Data Governance Is Not AI Governance
While organisations invest heavily in data governance frameworks to manage information security and compliance, a critical gap is emerging: the assumption that governing data automatically means governing the AI systems that use it. This article examines why data governance and AI governance are distinct disciplines, exploring the unique risks that arise when AI operates faster than the governance structures designed to control it...
South Africa Privacy
E
ENS
Article
Blocked Means Blocked: Why Consent Cannot Override A Registered Block Under The NCC’s Draft Guidelines
South Africa's National Consumer Commission has published draft guidelines clarifying how the National Opt-Out Registry interacts with existing consumer consent for direct marketing. The guidelines address critical questions about when historical consent remains valid and under what circumstances pre-emptive blocks override marketing permissions, with significant implications for businesses engaged in direct marketing activities.
South Africa Consumer
E
ENS
Article
South Africa’s Opt-Out Registry: This Is An IT Project, Not Just A Legal One
South Africa's National Consumer Commission Opt-Out Registry introduces a dual compliance framework that requires organisations to satisfy both POPIA's personal information processing requirements and the CPA's pre-emptive marketing blocks. Businesses must fundamentally restructure their technology, data management, and operational processes to prevent prohibited marketing communications from reaching consumers who have exercised their right to opt out.
South Africa Media & IT
E
ENS
See more

Privacy Protection

Article
Visitor Data At The Gate: Is Your Estate Communicating Clearly Enough?
Residential estates routinely collect visitor information at security gates, but many fail to properly communicate how this personal data is used, stored, and shared. As regulatory scrutiny intensifies under POPIA, estates, HOAs, and managing agents must ensure visitors receive clear privacy notices at the point of collection. This article examines practical steps for aligning gate security practices with data protection requirements.
South Africa Privacy
FW
Fairbridges
See more

Latest Videos

See more