ENSign | AI In Financial Services - A Data Privacy Perspective (Video)

As artificial intelligence shopping agents evolve from simple search tools to autonomous purchasing assistants, South African businesses face critical questions about data collection, consumer protection, and legal responsibility that existing frameworks like POPIA were never designed to address. How should organisations navigate AI disclosure requirements, handle voluntarily shared sensitive information, and establish governance protocols when their chatbots can independently compare products, personalise

South African data protection law requires organisations to notify regulators and affected individuals when personal information is accessed or acquired by unauthorised persons, but what exactly constitutes "access," "acquisition," or "reasonable grounds to believe" a breach has occurred? This analysis examines these undefined legal concepts through the lens of established cybersecurity frameworks and digital forensics practices, exploring how they apply to modern cyber-attacks and automated tools in the co

Meta's introduction of username-based communication on WhatsApp represents a fundamental architectural shift for the world's most popular messaging service...

When organisations assign unique identifiers like account numbers or reference codes to individuals, do these identifiers fall outside data protection laws? A recent South African court case challenges conventional assumptions about what constitutes personal information under POPIA, raising critical questions about pseudonymisation, identifiability standards, and compliance obligations that every organisation processing such data must understand.

Residential estates routinely collect visitor information at security gates, but many fail to properly communicate how this personal data is used, stored, and shared. As regulatory scrutiny intensifies under POPIA, estates, HOAs, and managing agents must ensure visitors receive clear privacy notices at the point of collection. This article examines practical steps for aligning gate security practices with data protection requirements.

When personal information is compromised, insurers face more than a technical problem—they confront a legal and reputational crisis that demands immediate, structured action. Drawing lessons from major South African data breaches including Dis-Chem, Experian, and FlySafair, this analysis examines how insurance organisations can implement effective data breach triage protocols under POPIA to ensure proportionate escalation, preserve evidence, and maintain control when incidents occur.

South Africa's Information Regulator has issued an enforcement notice against Central Johannesburg TVET College for multiple violations of the Protection of Personal Information Act (POPIA), including failure to register...

Regulatory risk has evolved from a contained legal issue into a complex structural challenge that spans multiple business functions. As organisations face overlapping obligations across data protection...

Deepfakes and AI-generated manipulation are no longer fringe tech. In a school environment, a learner or staff member’s face can be pulled from a sports photo, a class video...

As organisations continue to process increasing volumes of personal information, understanding how data is processed within the organisation through systems, teams and third parties is essential.