Opt-out rules bring financial services into the compliance net
The NCC’s draft guidelines include financial institutions and insurers, giving businesses five months to prepare for monthly database cleansing and enforcement.
POPIA
Information Regulator sounds alarm over data breaches
The Regulator highlights the scale of security incidents, direct-marketing concerns, enforcement cases, and weaknesses in the legislative framework.
This Toolkit makes POPIA compliance more practical for businesses
Moonstone Compliance’s POPIA Toolkit gives businesses a structured, practical way to navigate POPIA through customisable templates, checklists, and risk-management tools.
When a misdirected email becomes a POPIA enforcement case
The enforcement notice suggests that internal, accidental disclosures can still become reportable security compromises with formal regulatory consequences.
CPD deadline days away: MBSE highlights immediate-access course options
Professionals still have time to complete any outstanding hours, but they should avoid leaving enrolment to the weekend.
Human error remains the biggest cybersecurity threat for dealerships
Panellists at the F&I Virtual Summit say most data breaches still begin with staff mistakes, despite growing investment in digital systems and compliance controls.
AI impersonation exposes gaps in South African law
Existing legislation can offer some protection against deepfakes and fraud, but enforcement challenges and outdated frameworks leave victims vulnerable.
Code will change how estates and office parks handle visitor data
The Code emphasises proportional information processing in gated environments and aims to standardise lawful access-control practices.
Running out of time for CPD? MBSE says use the hours you already have
Advisers can reduce last-minute pressure by breaking the remaining hours into shorter, more manageable sessions instead of cramming courses into a final rush.
Still short on CPD hours? MBSE suggests ready-made combinations
MBSE’s CPD combinations help advisers and FSPs to complete their annual requirements while focusing on ethics, conduct, communication, and regulatory readiness.
Information Regulator signals tougher POPIA and PAIA enforcement
Werksmans says the Regulator’s performance plan points to stricter oversight of breach reporting, direct marketing, PAIA compliance, and cross-border transfers.
Death claims test trustees as section 37C meets real-world complexity
From disputed dependants to contested deaths, trustees are judged on how they investigate and explain their decisions.
Direct marketers on notice as CPA spam rules become law
Consumers can now block unsolicited marketing through a national registry, with strict new rules and penalties for marketers who fail to comply.
Cabinet clears draft AI policy for public comment
Approval of the draft AI policy signals a shift to structured oversight, with businesses urged to prepare for evolving compliance expectations.
PAIA deadline opens as Regulator tightens oversight on information access
Missed submissions could trigger enforcement as the Regulator scrutinises how firms handle access to information requests.
E-commerce risks outpace consumer protection laws, Ombud warns
A joint NCC and CGSO paper highlights rising e-commerce complaints and regulatory gaps, with proposed reforms set to reshape platform accountability and consumer protection.
New POPIA regulations on health information now in force
The Information Regulator clarifies how organisations such as insurers, pension funds, and employers must process and protect health information.
