South Africa: Data Protection

South African organisations pursuing data monetisation initiatives face a critical regulatory requirement under POPIA that many overlook: using unique identifiers to link datasets across entities may require prior authorisation from the Information Regulator. This legal blind spot affects customer-360 programmes, AI initiatives, data enrichment projects, and commercial partnerships where identifiers like ID numbers or customer references are used to match information between responsible parties.

South Africa's government directive mandates that all government data must reside within national borders when using cloud computing services, creating complex compliance challenges as modern cloud environments often involve cross-border data flows. This requirement forces government institutions and technology providers to carefully examine the entire data lifecycle, from storage and backup to access and processing, while ensuring compliance with the Protection of Personal Information Act.

As artificial intelligence shopping agents evolve from simple search tools to autonomous purchasing assistants, South African businesses face critical questions about data collection, consumer protection, and legal responsibility that existing frameworks like POPIA were never designed to address. How should organisations navigate AI disclosure requirements, handle voluntarily shared sensitive information, and establish governance protocols when their chatbots can independently compare products, personalise

This comprehensive legal update covers recent developments across South African law, from pharmaceutical naming regulations and copyright platform liability to VAT amendments affecting insurance and digital services. The collection explores emerging challenges in intellectual property protection, cryptocurrency regulation, and data brokering, while examining how AI and digital transformation are reshaping traditional legal frameworks.

Regulatory risk has evolved from a contained legal issue into a complex structural challenge that spans multiple business functions. As organisations face overlapping obligations across data protection...

The recent withdrawal of South Africa’s Draft National Artificial Intelligence (AI) Policy by the Minister of Communications and Digital Technologies, Mr Solly Malatsi...

Artificial Intelligence (AI) is rapidly transforming South Africa's financial sector, driving innovation, operational efficiency, and new customer experiences.

A U.S. district court in Illinois has recently held that a commercial general liability policy's "access or disclosure of confidential or personal information"...

With the year coming to end, many companies will be hosting year-end events to celebrate and close off the year. During these festivities, memories are often being captured in photographs.