Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 07 SEPTEMBER 2026

Data Localisation In The Public Sector: Where Should Government Data Reside?

ENS
Explore more from ENS

South Africa's government directive mandates that all government data must reside within national borders when using cloud computing services, creating complex compliance challenges as modern cloud environments often involve cross-border data flows. This requirement forces government institutions and technology providers to carefully examine the entire data lifecycle, from storage and backup to access and processing, while ensuring compliance with the Protection of Personal Information Act.

South AfricaMedia, Telecoms, IT, Entertainment
Rakhee Dullabh
Rakhee Dullabh
Aobakwe Motebe
Aobakwe Motebe
Author LinkedIn connections

As the South African government accelerates its adoption of cloud computing, AI and other data-intensive technologies, one question is becoming increasingly important: where does government data actually reside and where should it reside?

The answer is not always as straightforward as the location of a cloud provider’s data centre.

The Minister for Department of Public Service Administration approved the Determination and Directive on the Usage of Cloud Computing Services in the Public Service on 12 January 2022. The directive was approved under the Public Service Act, 1994 and its purpose is to provide guidance to government departments on the adoption and use of cloud services, where government data is either stored or processed. The directive's position is clear – government data must reside within the borders of South Africa and where this is not possible and government data is hosted outside of South Africa, the directive places the onus on the relevant head of department to

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

South Africa’s Opt-Out Registry: This Is An IT Project, Not Just A Legal One

South Africa's National Consumer Commission Opt-Out Registry introduces a dual compliance framework that requires organisations to satisfy both POPIA's personal information processing requirements and the CPA's pre-emptive marketing blocks. Businesses must fundamentally restructure their technology, data management, and operational processes to prevent prohibited marketing communications from reaching consumers who have exercised their right to opt out.
South AfricaMedia, Telecoms, IT, Entertainment
ENS
ENS
Article

Data Derived From AI: Understanding The Legal Risks Of Synthetic Data, Embeddings And AI-generated Data

AI systems are generating new categories of data that challenge traditional SaaS contract definitions, creating potential disputes between vendors and customers over ownership and usage rights. As synthetic data, embeddings, and vector databases emerge from AI processes, existing contractual frameworks for anonymised and aggregated data may prove inadequate to address the commercial, legal, and regulatory risks these novel datasets present.
South AfricaMedia, Telecoms, IT, Entertainment
ENS
ENS
Article

Unique Identifiers: The POPIA Issue That Can Derail Data Commercialisation Or Monetisation

South African organisations pursuing data monetisation initiatives face a critical regulatory requirement under POPIA that many overlook: using unique identifiers to link datasets across entities may require prior authorisation from the Information Regulator. This legal blind spot affects customer-360 programmes, AI initiatives, data enrichment projects, and commercial partnerships where identifiers like ID numbers or customer references are used to match information between responsible parties.
South AfricaMedia, Telecoms, IT, Entertainment
ENS
ENS