FNB Fined R1 Million for POPIA Breaches

First National Bank (FNB) was fined R1 million by the Information Regulator (InfoReg) in South Africa for breaching the Protection of Personal Information Act (POPIA) following a data exposure incident involving 88 home loan applicants' personal information, which FNB states it has since remedied. The fine was imposed after the InfoReg determined that FNB contravened multiple provisions of POPIA due to a glitch in its mobile app that inadvertently exposed personal identifiable information, including names, identity numbers, contact details, and account numbers, to an FNB customer.

This administrative fine underscores the Information Regulator's active and increasingly stringent enforcement of POPIA, serving as a critical warning to all South African entities, particularly those handling sensitive personal data. It highlights that even claims of comprehensive remediation and no reported financial harm to customers do not necessarily preclude regulatory penalties. The InfoReg's caution regarding the