Firms under-report POPIA breaches as cyber attacks rise

South African firms are under-reporting data breaches to the Information Regulator despite rising cyber attacks, indicating potential non-compliance with mandatory POPIA breach notification requirements. This enforcement gap suggests challenges in regulatory oversight and may require stronger enforcement measures to ensure proper breach disclosure.