With increased processing of personal data by aggregators with a
worldwide reach, data processing activities may come under the
simultaneous jurisdiction of several national and regional
laws.
This article is the first in a series looking at the reach, and
the limits, of various data protection regimes that may affect the
activities of businesses based in South Africa and doing business
in other countries, as well as businesses based elsewhere doing
business with South African customers and suppliers.
A recent decision of the England and Wales High Court has
provided companies outside the European Union with some much-needed
guidance on the territorial scope of the Europeans Union's
General Data Protection Regulation
("GDPR") and whether they are subject to
the GDPR's stringent data protection requirements and its
territorial jurisdictional reach.
