Timeline of Record

Every documented action, ruling and appointment of the South African Information Regulator, ordered chronologically.

Filter by section

40 entries

November 2026

3 entries

POPIAThursday, 5 November 2026

Top bank in South Africa tracking airtime purchases, social media profiles, website visits, and online shopping to decide if customers can get loans

A major South African bank is reportedly using alternative data sources—including airtime purchases, social media activity, website visits, and online shopping behavior—for creditworthiness assessments. This practice raises significant POPIA compliance questions around lawful processing, consent, purpose limitation, and data minimization that fall squarely within the Information Regulator's enforcement mandate.

Source · MyBroadband

RulingsMonday, 2 November 2026

Kgetlengrivier Concerned Citizens v Kgetlengrivier Local Municipality and Another (361/2025) [2026] ZASCA 148 (2 November 2026)

A Supreme Court of Appeal case involving Kgetlengrivier Concerned Citizens and a local municipality. Without further details from the excerpt, the connection to PAIA or the Information Regulator is unclear, though citizen groups often invoke PAIA to access municipal records. Relevance depends on whether information access was disputed.

Source · SAFLII

RulingsMonday, 2 November 2026

Mukansi N.O and Others v Nedbank and Others (2019/25860) [2026] ZAGPJHC 1245 (2 November 2026)

A 2026 High Court case between Mukansi N.O. and Nedbank. Without access to the full judgment details, the relevance to the Information Regulator cannot be definitively assessed, though banking disputes sometimes involve data protection or access-to-information questions under POPIA or PAIA.

Source · SAFLII

October 2026

16 entries

AppointmentsSaturday, 31 October 2026

Information Regulator CIO scoops IT personality of the year award

The Chief Information Officer of South Africa's Information Regulator has been recognised as IT Personality of the Year by ITWeb, highlighting individual leadership within the regulatory body. This award acknowledges the CIO's contributions to technology implementation and digital transformation at the Regulator.

Source · ITWeb

PAIAFriday, 30 October 2026

AfriForum turns to PAIA over camera access dispute

AfriForum has invoked the Promotion of Access to Information Act (PAIA) in a dispute concerning access to camera footage. This case highlights PAIA's role as a mechanism for civil society organizations to compel information disclosure, demonstrating practical application of access-to-information rights in South Africa.

Source · George Herald

PAIAFriday, 30 October 2026

AfriForum submits PAIA request following George Municipality’s silence on camera system

AfriForum has submitted a PAIA request to George Municipality after the municipality failed to respond to queries about its camera system. This case highlights the use of PAIA as a mechanism to compel public bodies to disclose information when voluntary transparency fails, demonstrating practical application of access-to-information rights in local government contexts.

Source · AfriForum

EnforcementFriday, 30 October 2026

DA demands accountability as Information Regulator launches probe into Land Bank - Polity.org.za

The Information Regulator has initiated an investigation into the Land Bank, prompting the DA to call for accountability. This enforcement action signals the Regulator's willingness to scrutinize state entities for potential data protection or access-to-information violations, reinforcing its oversight mandate.

Source · Polity.org.za

RulingsFriday, 30 October 2026

National Director of Public Prosecutions v Agrizzi (077715/2024) [2026] ZAGPPHC 1243 (29 October 2026)

A court ruling in a National Prosecuting Authority matter involving Agrizzi. While this case primarily concerns prosecution proceedings rather than information access or data protection, it may have tangential relevance if PAIA requests or personal information issues arose during the proceedings. Without more details, direct connection to the Information Regulator appears limited.

Source · SAFLII

EnforcementWednesday, 28 October 2026

FNB fined R1 million for POPIA breach after sensitive customer information was exposed

The Information Regulator imposed a R1 million fine on First National Bank (FNB) for violating POPIA by exposing sensitive customer information. This enforcement action demonstrates the Regulator's commitment to holding major financial institutions accountable for data protection failures and signals increasing regulatory consequences for non-compliance.

Source · IOL

EnforcementTuesday, 27 October 2026

Regulator hits FNB with R1-million Popia fine

The South African Information Regulator has imposed a R1-million fine on First National Bank (FNB) for violations of the Protection of Personal Information Act. This enforcement action demonstrates the Regulator's willingness to issue substantial penalties against major financial institutions for POPIA non-compliance.

Source · TechCentral

EnforcementTuesday, 27 October 2026

FNB issued with R1m fine for POPIA violation

The Information Regulator imposed a R1 million fine on First National Bank (FNB) for violating POPIA provisions. This enforcement action demonstrates the Regulator's willingness to levy significant financial penalties against major institutions for non-compliance with data protection requirements.

Source · ITWeb

EnforcementMonday, 26 October 2026

Top bank in South Africa fined R1 million for not protecting customer data

A major South African bank has been fined R1 million for failing to adequately protect customer data, representing a significant enforcement action by the Information Regulator under POPIA. This penalty underscores the Regulator's commitment to holding financial institutions accountable for data protection breaches and sets a precedent for the sector.

Source · BusinessTech

EnforcementMonday, 26 October 2026

FNB fined R1 million for exposing private customer data

FNB has been fined R1 million for exposing private customer data, representing a direct enforcement action by the Information Regulator under POPIA. This penalty demonstrates the Regulator's commitment to holding major financial institutions accountable for data protection breaches and signals increasing regulatory oversight in South Africa's banking sector.

Source · MyBroadband

POPIAThursday, 22 October 2026

Africa AI & Data Protection Regulation Report | October 2026

A comprehensive October 2026 report examining AI and data protection regulation across Africa, likely covering POPIA implementation progress, the Information Regulator's evolving role in AI governance, and comparative regulatory developments across the continent. The report may signal emerging enforcement trends and cross-border data protection coordination efforts relevant to South Africa's regulatory framework.

Source · Wansom AI

GeneralMonday, 19 October 2026

Information Regulator warns against election misinformation

The Information Regulator issued a public warning regarding election-related misinformation, signaling heightened regulatory vigilance during electoral periods. This intervention underscores the Regulator's expanding role in safeguarding information integrity beyond traditional data protection mandates, potentially invoking POPIA provisions around lawful processing and accuracy of personal information in political contexts.

Source · SABC News

POPIAMonday, 12 October 2026

Four compliance lessons from South Africa’s privacy regulator

Article outlines four key compliance lessons derived from South Africa's Information Regulator's enforcement and guidance activities. These insights help organisations better understand practical POPIA compliance requirements and the Regulator's enforcement priorities, offering valuable operational guidance for responsible parties navigating data protection obligations.

Source · Lexology

PAIASunday, 11 October 2026

Accountability under pressure as Joburg fails to release misconduct investigation records

Johannesburg's failure to release misconduct investigation records highlights ongoing challenges with transparency and PAIA compliance at municipal level. This refusal to disclose public interest information undermines accountability mechanisms and may constitute a violation of access-to-information obligations, potentially requiring Information Regulator intervention to enforce disclosure.

Source · Daily Maverick

POPIATuesday, 6 October 2026

Meta met Information Regulator over its camera glasses

Meta engaged with South Africa's Information Regulator regarding its camera-equipped smart glasses, likely addressing privacy and personal information protection concerns under POPIA. The meeting suggests proactive regulatory dialogue on emerging surveillance technologies and their compliance with data protection frameworks.

Source · TechCentral

POPIAMonday, 5 October 2026

South Africa’s privacy regulator prepares for the AI era

South Africa's Information Regulator is actively preparing regulatory frameworks and guidance to address artificial intelligence technologies and their implications for personal data protection under POPIA. This signals the Regulator's proactive approach to emerging technology challenges in the data protection landscape.

Source · Lexology

September 2026

15 entries

EnforcementWednesday, 30 September 2026

Information Regulator to engage Gauteng over e-Panic Button data breach

The Information Regulator is set to engage with the Gauteng provincial government regarding a data breach involving the e-Panic Button system. This represents active enforcement oversight by the Regulator into potential POPIA violations affecting what appears to be a public safety application.

Source · Mail & Guardian

EnforcementMonday, 28 September 2026

DA to report e-Panic button data breach to Information Regulator of South Africa

The DA is formally reporting a data breach involving the e-Panic button system to the Information Regulator, indicating a potential POPIA compliance issue in Gauteng's emergency response infrastructure. This enforcement action highlights the Regulator's role in investigating breaches affecting personal information of citizens using public safety services.

Source · Gauteng

PAIAWednesday, 23 September 2026

Media Statement: Justice Committee Approves Publication of Proposed Amended PAIA Court Rules to Enhance Transparency and Access to Justice

Parliament's Justice Committee has approved the publication of proposed amendments to PAIA court rules aimed at improving transparency and access to justice. These procedural changes will affect how access-to-information cases are handled in South African courts, potentially streamlining PAIA litigation processes and strengthening enforcement mechanisms under the Information Regulator's mandate.

Source · Parliament of South Africa

PAIAFriday, 18 September 2026

Want to know how to access information from the City? Find out 23 September - novanews.co.za

The City is hosting an event on 23 September to educate the public on accessing municipal information, likely under PAIA (Promotion of Access to Information Act). This community outreach supports transparency and helps citizens understand their information access rights when dealing with local government.

Source · novanews.co.za

GeneralThursday, 17 September 2026

InfoReg unpacks regulatory complexities posed by AI

The Information Regulator addresses the regulatory challenges posed by artificial intelligence technologies, likely focusing on data protection implications under POPIA and potential governance frameworks. This signals the Regulator's engagement with emerging technology issues affecting personal information processing in South Africa.

Source · ITWeb

RulingsThursday, 10 September 2026

G.P. obo N.P v Member of Executive Council for Health, Gauteng Province (2014/34461) [2026] ZAGPJHC 1047 (10 September 2026)

This case involves a health-related dispute in the Gauteng Division of the High Court and does not directly concern the Information Regulator, POPIA, or PAIA matters. It appears to be a medical negligence or healthcare administration case without apparent data protection or access to information components relevant to the Regulator's mandate.

Source · SAFLII

PAIAWednesday, 9 September 2026

Land Bank silence leaves no option but Public Protector investigation

The Democratic Alliance is referring the Land Bank to the Public Protector due to the institution's lack of responsiveness. This matter relates to transparency and access to information obligations under PAIA, highlighting potential failures by a state entity to comply with information disclosure requirements.

Source · Democratic Alliance

EnforcementFriday, 4 September 2026

Information Regulator takes on top South African network operator about spam calls

The Information Regulator has initiated action against a major South African mobile network operator regarding spam calls, signaling enforcement of direct marketing and consent provisions under POPIA. This case highlights the Regulator's growing focus on unsolicited communications and telco compliance with data protection laws.

Source · MyBroadband

POPIAFriday, 4 September 2026

MTN, OUTsurance face Information Regulator scrutiny over unsolicited marketing

The South African Information Regulator is investigating MTN and OUTsurance for alleged unsolicited direct marketing violations, likely under POPIA's direct marketing provisions. This scrutiny demonstrates the Regulator's active enforcement of consent requirements and consumer protection against unwanted communications.

Source · IOL

EnforcementThursday, 3 September 2026

Information Regulator sounds alarm over data breaches

The Information Regulator has issued a warning regarding data breaches, signaling heightened concern over personal information security in South Africa. This alarm likely relates to increased breach incidents or inadequate organizational compliance with POPIA reporting and protection requirements.

Source · Moonstone Information Refinery

POPIAThursday, 3 September 2026

Personal information of millions of South Africans exposed in 8,000 data breaches

South Africa has experienced approximately 8,000 data breaches exposing personal information of millions of citizens, highlighting significant POPIA compliance challenges and enforcement gaps. This scale of breaches underscores the critical need for stronger Information Regulator oversight and stricter enforcement mechanisms to protect personal data.

Source · MyBroadband

EnforcementWednesday, 2 September 2026

Popia enforcement gains teeth, but a critical loophole remains

POPIA enforcement is strengthening, indicating increased regulatory activity by the Information Regulator. However, a significant gap in the enforcement framework persists, potentially undermining the Regulator's ability to fully protect personal information rights in South Africa.

Source · Moneyweb

EnforcementWednesday, 2 September 2026

POPIA grace period limits regulator’s fines

The POPIA grace period constrained the Information Regulator's ability to impose fines during the initial compliance phase. This transitional limitation affected enforcement actions as organisations adjusted to data protection obligations, reflecting the Regulator's measured approach to early non-compliance.

Source · ITWeb

EnforcementTuesday, 1 September 2026

The regulator is watching: New enforcement signals for POPIA and PAIA compliance - Polity.org.za

The South African Information Regulator is demonstrating increased enforcement activity regarding POPIA and PAIA compliance, signaling a more active regulatory posture. This development suggests organizations must prioritize data protection and access-to-information obligations as the Regulator intensifies its oversight and enforcement mechanisms.

Source · Polity.org.za

EnforcementTuesday, 1 September 2026

Two departments nailed with R5 million fines in South Africa

Two South African government departments have been fined R5 million collectively, likely by the Information Regulator for violations related to personal information protection. This represents significant enforcement action demonstrating the Regulator's willingness to impose substantial financial penalties on state entities for non-compliance.

Source · BusinessTech

August 2026

5 entries

EnforcementMonday, 31 August 2026

InfoReg concerned by ‘alarming’ rate of data breaches

The Information Regulator has expressed concern over an alarming increase in the rate of data breaches being reported. This signals heightened enforcement focus and underscores ongoing compliance challenges organizations face under POPIA's mandatory breach notification requirements.

Source · ITWeb

PAIAMonday, 31 August 2026

Land Bank misses PAIA deadline: where did the liquidation money go?

The Democratic Alliance reports that the Land Bank failed to meet a PAIA deadline regarding disclosure of liquidation funds. This highlights ongoing compliance challenges with access-to-information obligations under PAIA, potentially indicating weak institutional adherence to transparency requirements that fall under the Information Regulator's mandate.

Source · Democratic Alliance

POPIAMonday, 31 August 2026

South Africa InfoReg Data Breach Reports: Over 8,000 Incidents Alarm Regulator

South Africa's Information Regulator has received over 8,000 data breach reports, a volume that has raised significant concern among officials. The high incident count underscores ongoing challenges in data protection compliance and enforcement under POPIA, highlighting the scale of security vulnerabilities across South African organizations.

Source · Wansom AI

PAIAMonday, 10 August 2026

‘Release secret Metro Centre reports’ demand as Joburg planning collapse deepens

Demands for release of allegedly secret reports about Johannesburg's Metro Centre planning failures may invoke PAIA principles on public access to government-held information. This highlights ongoing transparency tensions between municipal authorities and public interest, a core PAIA domain where the Information Regulator could adjudicate access disputes if formal requests are denied.

Source · Daily Maverick

AppointmentsTuesday, 4 August 2026

Media Statement: Justice Committee Recommends Two Candidates for Information Regulator

Parliament's Justice Committee has recommended two candidates for appointment to the Information Regulator, addressing ongoing capacity and staffing needs. These appointments will strengthen the Regulator's ability to fulfill its POPIA and PAIA oversight mandate.

Source · Parliament of South Africa

July 2026

1 entry

EnforcementWednesday, 29 July 2026

How new access control rules may reshape South Africa’s estate security in future

New access control regulations could impact how South African residential estates manage security and visitor data, potentially raising POPIA compliance concerns around lawful processing, retention, and consent for biometric or personal information collected at entry points.

Source · SAPeople