South Africa: Data Protection

South Africa's National Consumer Commission has published draft guidelines clarifying how the National Opt-Out Registry interacts with existing consumer consent for direct marketing. The guidelines address critical questions about when historical consent remains valid and under what circumstances pre-emptive blocks override marketing permissions, with significant implications for businesses engaged in direct marketing activities.

South Africa's National Consumer Commission Opt-Out Registry introduces a dual compliance framework that requires organisations to satisfy both POPIA's personal information processing requirements and the CPA's pre-emptive marketing blocks. Businesses must fundamentally restructure their technology, data management, and operational processes to prevent prohibited marketing communications from reaching consumers who have exercised their right to opt out.

South African organisations pursuing data monetisation initiatives face a critical regulatory requirement under POPIA that many overlook: using unique identifiers to link datasets across entities may require prior authorisation from the Information Regulator. This legal blind spot affects customer-360 programmes, AI initiatives, data enrichment projects, and commercial partnerships where identifiers like ID numbers or customer references are used to match information between responsible parties.

The Internet of Things is revolutionising data collection and analysis, enabling organisations to harness real-time information streams for automated decision-making through AI systems. However, this technological convergence presents complex legal challenges around data privacy, transparency and accountability that organisations must carefully navigate.

Modern software solutions rarely operate independently. Behind a single banking platform, SaaS product or mobile application sits a network of third-party integrations, cloud providers and external...

This comprehensive legal update covers recent developments across South African law, from pharmaceutical naming regulations and copyright platform liability to VAT amendments affecting insurance and digital services. The collection explores emerging challenges in intellectual property protection, cryptocurrency regulation, and data brokering, while examining how AI and digital transformation are reshaping traditional legal frameworks.

As AI becomes embedded in classrooms, schools and universities face a pivotal choice: leverage its benefits for personalised learning, support and feedback, and improved access to information...

Every day, organisations across Africa collect, process and store vast quantities of personal information.

Artificial Intelligence (AI) is rapidly transforming South Africa's financial sector, driving innovation, operational efficiency, and new customer experiences.