South Africa: Adopted national data and cloud policy including data residency obligations

On 31 May 2024, the South African Department of Communications and Digital Technologies adopted the final national data and cloud policy, including data residency obligations. The policy applies to data management and cloud computing within South Africa. The guideline mandates that government data pertaining to protecting and preserving national security and sovereignty should be stored only on digital infrastructure within South Africa. Further, the policy sets out criteria for the government to follow in seeking out cross-border data transfer and data sharing agreements. Specifically, such agreements should promote national interests, comply with existing data governance regulations, and enhance mutually beneficial cooperation.