SA information regulator ready to fine and jail company directors for data breaches

The South African Information Regulator has signaled its readiness to impose financial penalties and pursue criminal sanctions, including potential imprisonment, against company directors responsible for data breaches. This marks a significant escalation in enforcement posture, indicating the Regulator will leverage its full statutory powers under POPIA to hold executives personally accountable for non-compliance.