Briefly
Live preview · South Africa

Legal and Regulatory intelligence for you

Sources (25)
Regulatory News
Legal News
South Africa
Legal News

South Africa Insurers: AI Policy Vacuum Persists Amid Rapid Adoption

South African insurers are independently developing their own Artificial Intelligence (AI) frameworks due to the absence of a finalised National AI Policy, following the withdrawal of a draft policy that contained fictitious, AI-generated citations earlier this year. This proactive approach by the insurance sector, as highlighted by KPMG South Africa's annual Insurance Survey, comes amidst an ongoing internal investigation by the Department of Communications and Digital Technologies (DCDT) into the flawed draft policy, which has already led to the precautionary suspension of two officials. The DCDT is now targeting the 2026/2027 financial year for the finalisation of the policy, acknowledging the need for expert input to rectify fundamental errors and ensure proper verification. This situation carries significant legal implications for the South African financial sector, as the absence of a comprehensive national AI policy creates a regulatory vacuum that forces individual entities to establish their own governance standards. While this demonstrates industry agility, it also risks creating a fragmented regulatory landscape, potentially leading to inconsistencies in data privacy, ethical AI use, consumer protection, and competitive practices across the insurance market. The DCDT's previous misstep underscores the complexities of regulating rapidly evolving technologies and the critical importance of robust verification processes in policy formulation, especially when dealing with AI-generated content. The legal context for this development primarily revolves around the DCDT's mandate to establish a National AI Policy, which is currently in a state of flux. While specific AI legislation is pending, existing South African laws such as the Protection of Personal Information Act (POPIA) and the Consumer Protection Act (CPA) remain applicable, governing how insurers collect, process, and use personal data, and ensuring fair treatment of customers, respectively. The DCDT's efforts to assemble an advisory panel of AI experts, governance specialists, and academics signal a move towards a more informed and credible policy development process, which will ultimately shape the regulatory environment for AI across all sectors. Key parties involved include South African insurers, the Department of Communications and Digital Technologies (DCDT), Minister Solly Malatsi, KPMG South Africa, and the yet-to-be-formed expert advisory panel. The DCDT's internal investigation and the suspension of officials highlight accountability within the public sector regarding policy development. The KPMG survey, while not a legal document, provides crucial industry insights into how insurers are navigating this unregulated space, indicating a baseline adoption of AI for general efficiencies. For legal practitioners, the immediate takeaway is to advise South African insurers on developing robust internal AI governance frameworks that align with existing data protection and consumer protection legislation, while also being flexible enough to adapt to the forthcoming National AI Policy. Attorneys should closely monitor the DCDT's progress, particularly the output of the expert advisory panel, as this will dictate future compliance requirements. Furthermore, legal professionals must guide clients in mitigating risks associated with AI implementation, including ensuring transparency, addressing algorithmic bias, and establishing clear accountability mechanisms, especially given the DCDT's prior experience with

15 Oct
South Africa
Legal News

Western Cape: Disabled Adult Nappy Policy Inadequate, Causes Strain

In South Africa, disabled individuals and advocacy groups are demanding clearer policies from the Western Cape government and the City of Cape Town regarding the provision of adult nappies, citing insufficient supply from public health clinics, as reported by AllAfrica SA. The article highlights the plight of individuals like Angel from Eerste River, Cape Town, who, due to disability, requires adult nappies constantly but receives an inadequate supply from the Kleinvlei Community Health Clinic. Disability Revolution, an organisation representing people with disabilities, formally communicated these concerns in a letter dated 18 September to the Western Cape Department of Health and Wellness and the City of Cape Town, stating that the current provision of 10-15 nappies per month is insufficient for most users. The organisation has been seeking policy information on incontinence products since 2023, indicating a prolonged effort to address this systemic issue. The financial burden on disabled individuals, who often rely on disability grants, is also emphasised, as they are forced to purchase additional nappies at significant personal cost. This issue carries significant legal implications under South African constitutional law, particularly concerning the rights to dignity (Section 10), health care services (Section 27), and social security (Section 27) for persons with disabilities. The state has a constitutional obligation to take reasonable legislative and other measures, within its available resources, to achieve the progressive realisation of these rights. The current situation, where essential medical supplies like nappies are inadequately provided, could be argued to constitute a failure to uphold these fundamental rights, potentially leading to litigation aimed at compelling the provincial and local governments to fulfil their constitutional duties. It also raises questions about the implementation of the National Health Act and policies related to assistive devices and medical consumables. The legal framework includes the Constitution of the Republic of South Africa, 1996, specifically Sections 10, 27(1)(a) (right to health care services), 27(1)(c) (right to social security), and 27(2) (state's obligations). The National Health Act 61 of 2003 and its associated regulations would govern the provision of health services and medical supplies. Furthermore, the Promotion of Administrative Justice Act 3 of 2000 (PAJA) could be relevant if the activists seek to challenge the administrative decisions or lack thereof by the government bodies regarding policy on incontinence products. The matter could potentially be heard in the High Court, which has jurisdiction over constitutional matters, or potentially the Equality Court if discrimination is alleged. Attorneys specialising in constitutional law, administrative law, and human rights should closely monitor the response of the Western Cape government and the City of Cape Town to these demands. This situation presents a potential opportunity for public interest litigation to enforce socio-economic rights, particularly for vulnerable groups. Practitioners advising government entities should review existing policies on the provision of medical consumables to ensure compliance with constitutional obligations and to mitigate potential legal challenges. Furthermore, attorneys representing disability rights organisations should consider strategic litigation avenues to compel policy changes and adequate resource allocation. The excerpt does not indicate that any formal legal proceedings have been initiated, but rather that demands for policy clarification have been made, and the outcome of these demands or any potential future legal action is not reported.

15 Oct
South Africa
Courtroom Update

DA Initiates Legal Action Against eThekwini Municipality Over Billboard

The Democratic Alliance (DA) in South Africa is initiating legal action against eThekwini Municipality officials following allegations made against its water accountability billboard, as reported by Bizcommunity Legal. The DA is challenging claims made by senior eThekwini Municipality officials regarding a billboard it erected, which presumably highlights issues of water accountability within the municipality. The excerpt indicates a strong stance from the DA, stating they will "fight this tooth and nail," suggesting a robust legal challenge or defence against the municipality's allegations. The specific nature of the allegations by the officials is not detailed in the excerpt, nor is the precise legal forum where the DA is heading to court. This development is significant for practitioners in administrative law, public law, and constitutional law, particularly concerning freedom of expression and political speech in South Africa. It highlights the ongoing tension between political parties holding public bodies accountable and the potential for municipalities to challenge such public statements. The outcome could set precedents for how political parties can use public platforms to critique government performance and the extent to which municipalities can respond to or attempt to suppress such criticism. The legal context likely involves the constitutional right to freedom of expression, enshrined in Section 16 of the Constitution of the Republic of South Africa, 1996. This right is not absolute and can be limited, but any limitation must be reasonable and justifiable in an open and democratic society. Depending on the nature of the allegations by eThekwini officials, the matter could also touch upon defamation law if the municipality claims the billboard contains false and damaging statements, or administrative law if the municipality is attempting to enforce by-laws or regulations related to outdoor advertising. The court hierarchy would typically involve the High Court as the court of first instance for such constitutional or administrative challenges. Attorneys advising political parties, civil society organisations, or municipalities should closely monitor this case for developments regarding the scope of political speech, the limits of municipal authority to challenge such speech, and the procedural aspects of bringing such disputes before the courts. Businesses involved in outdoor advertising or public campaigns should also take note of any rulings that clarify the regulatory environment for billboards and public messaging, especially when it pertains to political accountability. The specific court or tribunal where the DA is heading is not specified in the excerpt, and the outcome of this matter is not yet reported.

15 Oct
South Africa
Case Law

SA Constitutional Court: ANC Election Ballots Must Be Reprinted

The Constitutional Court in South Africa ruled in favour of the African National Congress (ANC) in a dispute over candidates excluded from next month’s municipal elections, a judgment that may force the Independent Electoral Commission (IEC) to reprint ballot papers weeks before the 4 November vote. This ruling carries significant legal and logistical implications for South Africa's electoral process, potentially disrupting the IEC's carefully planned schedule and incurring substantial additional costs, as 66% of ballot papers, including many affected by the ANC's challenge, had already been printed. The ANC had appealed an Electoral Court ruling that upheld the IEC’s decision to exclude over 180 of its candidates, some in the Eastern Cape, after they missed a submission deadline, with the party attributing the failure to a technical glitch. The IEC had warned that a ruling in the ANC's favour would render previously printed ballots unusable, necessitating a costly reprint within a tight 21-day window. Legally, this case highlights the delicate balance between administrative efficiency and the fundamental right of political parties to participate in elections, particularly when technical issues are cited as the cause for non-compliance. The matter involved the interpretation of electoral legislation and regulations governing candidate registration, as well as the powers of the IEC to enforce deadlines. The Constitutional Court, as the apex court, exercised its jurisdiction to review the Electoral Court's decision, underscoring its role in safeguarding constitutional rights within the electoral framework. Key parties involved were the Constitutional Court, the Electoral Court, the Independent Electoral Commission, and the African National Congress. Practitioners advising political parties or involved in electoral law must closely monitor the IEC's operational response to this judgment, including any revised timelines for ballot production and potential adjustments to election logistics. For businesses, particularly those in printing, logistics, or election-related services, this development signals the need for extreme flexibility and contingency planning due to the potential for last-minute changes. It also reinforces the critical importance for all political entities to ensure robust internal systems and strict adherence to statutory deadlines to avoid similar challenges, as the practical outcome regarding the reprinting of ballots and its impact on the election schedule is still being determined.

15 Oct
South Africa
Legal News

SoftiDoc: Hologram Verification Boosts Digital KYC in South Africa

SoftiDoc, a South African technology company, is implementing hologram verification to enhance the Know Your Customer (KYC) process for digital onboarding, as explained by founder Jeremy Engelbrecht in an ITWeb report. This innovative approach uses optically verifiable devices (OVDs) found on official identity documents to confirm the authenticity of the physical document itself, complementing existing checks like identity numbers, barcode data, and liveness detection. The technology allows remote verification via a smartphone web application, prompting users to illuminate and move their ID documents to enable the system to analyse hologram reflections, thereby flagging fraudulent attempts using photographs or scanned copies. This development is crucial for financial institutions and other regulated entities in South Africa, as it directly addresses the increasing sophistication of identity fraud in digital environments, thereby bolstering compliance with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations. By adding an extra layer of security, SoftiDoc's solution helps organisations establish with greater certainty that they are dealing with a real person presenting a genuine identity document, which is paramount for maintaining trust and preventing financial crime in an era of widespread digital transactions. The primary legal framework governing KYC obligations in South Africa is the Financial Intelligence Centre Act (FICA) 38 of 2001, as amended, which mandates accountable institutions to implement robust measures for identifying and verifying clients. The Act, along with its associated regulations and guidance notes from the Financial Intelligence Centre (FIC), requires institutions to verify client identities to a high standard. The use of advanced technologies like hologram verification directly supports the

15 Oct
South Africa
Legal News

South Africa: Paperless FICA Verification Streamlines Onboarding

nCino KYC is hosting a webinar on October 21st at 10 am SAST, focusing on how to perform paperless FICA verification using biometric identity, liveness detection, and third-party address database checks, as reported by ITWeb. This session aims to provide practical guidance on implementing compliant electronic verification processes within the Financial Intelligence Centre's (FIC) requirements, moving away from traditional, often cumbersome, paper-based methods for client onboarding. This initiative is highly significant for South African legal practitioners and businesses, particularly accountable institutions under FICA, as it directly addresses the challenges of remote client onboarding and the need for compliant, efficient, and secure identity verification methods in an increasingly digital landscape. The shift to paperless solutions can streamline operations, reduce administrative burdens, and enhance the accuracy and reliability of client data, while simultaneously mitigating the risks associated with outdated or fraudulent physical documents. It represents a move towards modernising compliance practices in line with technological advancements. The core legal framework is the Financial Intelligence Centre Act (FICA) 38 of 2001, which imposes strict obligations on accountable institutions to identify and verify clients. The FIC's guidance notes and public compliance communications (PCCs) have increasingly supported the use of electronic verification methods, provided they meet the same reliability standards as traditional paper-based methods. The adoption of biometric identity verification, liveness detection, and third-party database checks aligns with global anti-money laundering (AML) and counter-terrorist financing (CTF) best practices, which advocate for technology-driven solutions to enhance compliance and reduce operational burdens. Key parties involved include nCino KYC as the solution provider, and experts like Mahluleli Mathiya and Tertia Barrett. Legal professionals advising FICA-regulated entities should actively explore and understand the capabilities of paperless FICA solutions, including biometric verification and third-party database checks. They should guide clients on implementing these technologies in a manner that fully complies with FICA and FIC guidance, ensuring that the chosen methods provide sufficient assurance of identity and address verification to withstand regulatory scrutiny. Practitioners should also monitor updates from the FIC regarding acceptable electronic verification methodologies and advise on the necessary policy and procedural adjustments to integrate these digital solutions effectively and compliantly. For businesses, the takeaway is to proactively investigate and adopt robust paperless FICA solutions to improve efficiency, enhance security, and ensure ongoing compliance. This includes conducting thorough due diligence on technology providers, understanding the technical and legal implications of biometric data processing, and training staff on new digital onboarding workflows. Embracing these technologies is not just about efficiency but also about strengthening an organisation's defence against financial crime and maintaining regulatory good standing.

15 Oct
South Africa
Legal News

South Africa: Escalating Third-Party Cyber Risk Leads to Breaches

South African businesses, including an ISP, Sanlam, Liberty Group, Profmed, and Rectron, have experienced significant data breaches and cyberattacks originating from compromises at their third-party suppliers, as highlighted by Richard Frost of Armata Cyber Security in an ITWeb report. These incidents, which occurred in 2026 and earlier, involved the leakage of sensitive client information such as names, ID numbers, emails, and contact details, demonstrating a growing trend where third-party vulnerabilities are exploited to gain access to enterprise systems and data. This trend is critically important for South African legal practitioners and businesses, as it underscores the escalating legal, financial, and reputational risks associated with third-party vendor relationships, particularly concerning data protection and cybersecurity. The reported breaches demonstrate that an organisation's security posture is only as strong as its weakest link in the supply chain, making robust third-party risk management an indispensable component of overall enterprise risk strategy. The financial and reputational fallout from such breaches can be severe, impacting customer trust and potentially leading to regulatory penalties. The primary legal framework governing these incidents is the Protection of Personal Information Act (POPIA) 4 of 2013, which imposes strict obligations on responsible parties (including businesses) to protect personal information, even when processed by operators (third-party suppliers). POPIA mandates that responsible parties ensure operators establish and maintain appropriate security measures. Failure to do so can lead to significant penalties, including administrative fines up to R10 million, imprisonment, and reputational damage. Other relevant legislation includes the Cybercrimes Act 19 of 2020, which criminalises various cyber offences, and common law principles related to negligence and breach of contract. The Information Regulator is the key regulatory body overseeing POPIA compliance, to whom Rectron reported its incident. Key parties involved include Armata Cyber Security (Richard Frost), ITWeb (source), and the affected South African companies: an ISP, Sanlam, Liberty Group, Profmed, and Rectron. The Information Regulator is also a crucial party, as Rectron reported its incident to them, highlighting the regulatory oversight in such matters. The 2025 SecurityScorecard Global Third-Party Breach Report further substantiates this trend, indicating that a significant percentage of data breaches originate from third-party compromises, underscoring the systemic nature of this vulnerability. Attorneys must advise clients on robust third-party risk management frameworks, including comprehensive due diligence before engaging suppliers, stringent contractual clauses addressing data security, liability, and breach notification, and ongoing monitoring of supplier security postures. Businesses should conduct regular security audits of their third-party ecosystem and develop incident response plans that specifically account for breaches originating from suppliers, ensuring compliance with POPIA's notification requirements to the Information Regulator and affected data subjects. Proactive measures, such as implementing strong vendor management policies and ensuring contractual indemnities, are essential to mitigate the legal and financial exposure arising from these increasingly common third-party vulnerabilities.

15 Oct
South Africa
Legal News

Start Small Business South Africa 2026: Key Steps for Entrepreneurs

ITWeb, in an article published in 2026, provided a comprehensive guide for prospective entrepreneurs on the practical steps required to establish a small business in South Africa. The article outlines a six-step process for starting a small business, emphasizing crucial initial stages such as market validation, thorough sector research, and competitor analysis within the South African context. A significant portion of the guidance focuses on the critical decision of business structure, clearly differentiating between sole proprietorships and partnerships, which do not require registration with the Companies and Intellectual Property Commission (CIPC) but entail personal liability for owners, versus a private company (Pty Ltd), which is a separate legal entity requiring CIPC registration and offering protection for personal assets. The piece underscores the importance of validating a business idea and understanding market demand before committing financial resources to stock, premises, or branding. This guide is highly significant for legal practitioners advising small and medium enterprises (SMEs) in South Africa, as it highlights the foundational legal and regulatory considerations that new ventures must navigate from their inception. The choice of business structure has profound implications for legal compliance, the extent of liability exposure for founders, and the future capacity for capital raising, all of which are critical areas requiring expert legal counsel. Furthermore, the emphasis on market research and idea validation implicitly points to the need for early legal advice on intellectual property protection, contractual agreements, and adherence to sector-specific regulations. The legal context for starting a business in South Africa primarily revolves around the Companies Act 71 of 2008, which governs the formation, registration, and operation of private companies (Pty Ltd) through the Companies and Intellectual Property Commission (CIPC). Sole proprietorships and partnerships, while not subject to CIPC registration, are governed by common law principles and specific partnership agreements, with owners typically bearing unlimited personal liability. Beyond company registration, new businesses must also consider compliance with various other statutes, including the Consumer Protection Act 68 of 2008, labour laws, and industry-specific regulations, depending on their sector of operation. The key parties involved are prospective small business owners and entrepreneurs, the CIPC as the primary regulatory body for company registrations, and legal and financial professionals who provide guidance. Attorneys should proactively advise clients on selecting the optimal business structure from the outset, carefully considering the implications for liability, tax obligations, and long-term growth strategies. It is crucial to ensure clients fully comprehend the legal distinctions between sole proprietorships, partnerships, and private companies, particularly concerning personal asset protection and the mandatory CIPC registration requirements for companies. Additionally, practitioners should guide clients through initial compliance obligations, which may include intellectual property registrations, drafting robust contractual agreements with suppliers and customers, and ensuring adherence to all relevant sector-specific regulations, even before formal trading commences. This proactive legal engagement can mitigate future risks and lay a solid foundation for business success.

15 Oct
South Africa
Legal News

South Africa: Act 36 Data Protection for Regulatory Dossiers

GoLegal, a prominent legal intelligence platform, recently highlighted the critical importance of data protection for scientific and technical information contained within regulatory dossiers for agrochemical products under Act 36, emphasizing that the commercial value of such products extends significantly beyond their patent specifications. This discussion underscores that the substantial investment in generating scientific and technical data for regulatory approval, which is essential for bringing agrochemical products to market, constitutes a valuable asset requiring robust legal safeguarding. The article focuses on the inherent worth of this proprietary information, which, while distinct from patentable inventions, is crucial for market access and competitive advantage within the agricultural sector. The excerpt itself does not report a specific ruling, outcome, or a new legal development, but rather frames a discussion around an existing area of legal and commercial interest. For legal practitioners, businesses, and the public, this emphasis on regulatory data protection carries significant implications. For agrochemical companies, the ability to protect their proprietary scientific and technical data ensures a return on their substantial research and development investments, fostering innovation and maintaining competitive differentiation in the market. Without adequate protection, this valuable information could be exploited by competitors, undermining the incentive for developing new and improved agricultural remedies. For the public, robust data protection frameworks can indirectly encourage the development of safer and more effective agrochemical products, as companies are more willing to invest in R&D when their intellectual assets are secure. The legal context for this discussion primarily revolves around Act 36, which is the Fertilizers, Farm Feeds, Agricultural Remedies and Stock Remedies Act, 1947, a foundational piece of legislation governing the registration and sale of agrochemicals in South Africa. While the excerpt mentions "patent specification," indicating an interplay with patent law, the focus is on data that may not necessarily be patentable but is still commercially valuable and submitted to regulatory authorities. Key parties involved in this landscape include agrochemical manufacturers who generate and submit these dossiers, the regulatory body responsible for administering Act 36 (e.g., the Department of Agriculture, Land Reform and Rural Development), and legal professionals advising on intellectual property and regulatory compliance. The discussion implicitly touches upon the intersection of intellectual property law (including trade secrets and confidential information) and sector-specific regulatory frameworks. Attorneys and legal professionals advising clients in the agrochemical sector should therefore closely monitor developments and interpretations regarding the protection of regulatory data under Act 36 and related intellectual property statutes. It is crucial to understand the specific mechanisms available for safeguarding scientific and technical information submitted for regulatory approval, which may differ from traditional patent or copyright protections. Practitioners should advise clients on best practices for identifying, documenting, and asserting rights over such data, including contractual measures and strategies for engaging with regulatory bodies. Furthermore, staying abreast of any proposed amendments to Act 36 or new guidelines from regulatory authorities concerning data exclusivity or protection periods will be vital for ensuring comprehensive and effective legal counsel in this specialized field.

15 Oct