Why security is the cornerstone of POPIA compliance
The Protection of Personal Information Act (POPIA) has evolved considerably since it was first put into practice four years ago. In 2024, the Information Regulator (IR) intensified enforcement, issuing at least seven enforcement notices for non-compliance to several...
ASSAf helps to demystify POPIA for researchers
The Academy of Science of South Africa (ASSAf) has launched its POPIA Voluntary Compliance Framework for Research, endorsed by the ASSAf Council. It is compulsory for all researchers to comply with POPIA. This voluntary Framework provides practical guidance for...
RMCP enforcement is here, and the consequences are real
Having a Risk Management and Compliance Programme (RMCP) isn’t just a procedural formality - it is a legal requirement under Section 42 of the Financial Intelligence Centre Act (FICA), writes Sameer Kumandan, MD of SearchWorks360. More importantly, it has become the...
The business benefits of getting POPIA right
Waiting until you’re on the wrong side of the Protection of Personal Information Act (POPIA) before taking action is a risk no business can afford. Beyond the threat of hefty fines or legal consequences, there’s the potential for serious reputational damage –...
POPIA regulations get a makeover
The Protection of Personal Information Act (POPIA) Regulations have received a facelift, with the Information Regulator publishing amendments to the Regulations on 17 April 2025. By Nadine Mather, partner, and Pascale Towers, senior associate at Bowmans The...
What SA’s tougher carbon tax means for high-emission industries
The South African government’s ‘carrot and stick’ approach to carbon emissions is going to feature more stick and less carrot in the coming years, as the incentives become less generous and the deterrents more onerous. In other words, the tax-free carbon allowance is...
The state of data protection laws in Africa
Data protection is no longer a niche concern; it’s a fundamental part of the digital age. With businesses, governments, and individuals increasingly relying on digital platforms, the issue of personal data security has never been more critical. By Oluwakemi Ola,...
Politically exposed clients the minefield Zondo flagged before the FATF
Accountable institutions face crippling penalties if their KYC screening fails to flag a client as a politically exposed person (PEP). As the nation fights to escape its greylisting, technology can identify PEPs without hoping they’ll be kindly forthcoming in...
Fast-track compliance to incoming plastics legislation
SAP is urging South African companies to prepare for incoming plastic legislation to protect profit and the planet. According to a new report launched in partnership with research consultancy Earth Action, business that fail to scale their plastic data management...
New Regulations usher in a new dispensation for electronic services
The long-awaited regulations introducing a general business-to-business (B2B) exclusion (although in this case a business-to-registered vendor exclusion) for the electronic services supplied from outside South Africa to specified recipients within the country were...
Poor audits can lead to costly non-compliance
South African businesses have suffered massive financial setbacks due to inadequate auditing, with cumulative losses from poor audits and compliance failures running into billions. Through its material irregularities process, the Auditor-General of South Africa...
What Budget 2025 means for FICA compliance and accountable institutions
The 2025 Budget Speech held on 12 March 2025, made it clear that financial crime enforcement and compliance are top priorities for the government, writes By Sameer Kumandan, MD of SearchWorks360. Increased funding for forensic investigations, regulatory oversight, and...