Opt-out rules bring financial services into the compliance net
The NCC’s draft guidelines include financial institutions and insurers, giving businesses five months to prepare for monthly database cleansing and enforcement.
#InformationRegulator
Information Regulator sounds alarm over data breaches
The Regulator highlights the scale of security incidents, direct-marketing concerns, enforcement cases, and weaknesses in the legislative framework.
When a misdirected email becomes a POPIA enforcement case
The enforcement notice suggests that internal, accidental disclosures can still become reportable security compromises with formal regulatory consequences.
Enforcement notice may signal tougher PAIA scrutiny for companies
The Information Regulator’s decision suggests companies may face closer scrutiny when they rely on commercial-confidentiality grounds to refuse access to records.
Code will change how estates and office parks handle visitor data
The Code emphasises proportional information processing in gated environments and aims to standardise lawful access-control practices.
Information Regulator signals tougher POPIA and PAIA enforcement
Werksmans says the Regulator’s performance plan points to stricter oversight of breach reporting, direct marketing, PAIA compliance, and cross-border transfers.
Direct marketers on notice as CPA spam rules become law
Consumers can now block unsolicited marketing through a national registry, with strict new rules and penalties for marketers who fail to comply.
PAIA deadline opens as Regulator tightens oversight on information access
Missed submissions could trigger enforcement as the Regulator scrutinises how firms handle access to information requests.
New POPIA regulations on health information now in force
The Information Regulator clarifies how organisations such as insurers, pension funds, and employers must process and protect health information.
Matric results row rolls into 2026 as Regulator digs in
Despite a decisive High Court loss, the Information Regulator is pushing on with an application for leave to appeal as the DBE confirms matric results will again be published in newspapers.
Matric results | Information Regulator’s argument dismissed as ‘fanciful’
The High Court has overturned the Regulator’s bid to stop the publication of the matric results, rejecting its claim that learners can be identified from exam numbers.
Regulator seeks court test to settle whether telemarketing falls under POPIA
The Information Regulator will push a test case to confirm whether unsolicited telephone calls qualify as ‘electronic communication’ under POPIA.
Information Regulator turns to SAPS over PAIA non-compliance
The Regulator’s recent enforcement notices relate to, among other cases, Jacob Zuma’s tax records and payments by the State Security Agency.
Legal experts flag concerns with draft POPIA regulations on health data
The proposed regulations on processing health and sex life data introduce consent and assessment requirements for, among others, insurers, medical scheme administrators, and retirement funds.
Information Regulator warns: Form 2 must be used for PAIA requests
Information officers should purge Form A from internal and public systems and replace it with Form 2 immediately.
Information Regulator opens submission window for 2024/25 PAIA reports
Public and private bodies are ‘invited’ to submit their annual reports on access-to-information requests for the period from 1 April 2024 to 31 March 2025.
Updated POPIA compliance: data breach reporting must be online
From 1 April, all security breaches must be reported solely via the Information Regulator’s online portal, not by email.
