ENSafrica Webinar | How POPIA Affects Your IP | 19 May 2021 (Video)

The Act sets out certain exceptions to the abovementioned rule.

South Africa's Information Regulator has issued an enforcement notice against Central Johannesburg TVET College for multiple violations of the Protection of Personal Information Act (POPIA), including failure to register...

When organisations assign unique identifiers like account numbers or reference codes to individuals, do these identifiers fall outside data protection laws? A recent South African court case challenges conventional assumptions about what constitutes personal information under POPIA, raising critical questions about pseudonymisation, identifiability standards, and compliance obligations that every organisation processing such data must understand.

As artificial intelligence accelerates the speed, scale and sophistication of cyberattacks in South Africa, organisations face critical questions about their legal obligations under POPIA. This analysis examines whether existing cybersecurity programmes remain legally adequate when threats evolve, and clarifies the precise circumstances under which AI-assisted security compromises must be reported to regulators and affected individuals.

By and large, the Protection of Personal Information Act, 2013 ("POPIA") only imposes obligations, duties and liabilities on the responsible party.

Data breaches have become an everyday reality in the 21st century and have, alarmingly, impacted numerous respected, large enterprises.

With the imminent grace period for organisations complying with the POPIA coming to an end on 30 June 2021, it is now crunch time for organisations to ensure that their processing activities are compliant with POPIA's conditions.

For most organisations, the direct marketing of products and services to customers and potential customers is a vital source of business.

As artificial intelligence shopping agents evolve from simple search tools to autonomous purchasing assistants, South African businesses face critical questions about data collection, consumer protection, and legal responsibility that existing frameworks like POPIA were never designed to address. How should organisations navigate AI disclosure requirements, handle voluntarily shared sensitive information, and establish governance protocols when their chatbots can independently compare products, personalise

The substantive provisions of the Protection of Personal Information Act, 4 of 2013 (POPIA), which spell out the rights and obligations of persons and companies collecting and using the personal information of others, are to come into effect from 1 July 2020.