Tech & Legal Updates
Short, executive level legal and commercial updates for founders and leaders of scaling technology businesses.
Information Regulator increases enforcement under POPIA
The Information Regulator has continued enforcement actions focusing on security safeguards and unlawful processing under the Protection of Personal Information Act.
This has direct operational impact on SaaS providers processing South African data. Compliance is now actively monitored, not theoretical.
Contractually, this requires operator agreements to include strict processing instructions, breach notification timelines, and cross-border transfer controls. Vendors must provide clear security warranties and accept defined liability exposure for data breaches.
Source Allowed: Information Regulator South Africa, published March 2026
https://inforegulator.org.za/