South Africa: Adopted data and cloud policy including data protection measures

On 31 May 2024, the Department of Communications and Digital Technologies adopted the data and cloud policy including data protection measures. The policy applies to data centre operators, cloud service providers, and technology companies involved in digital infrastructure. The policy requires the classification of government data and open access to public data. It also recommends a review of the data protection framework, the conducting of awareness campaigns, and periodic assessments of data protection compliance.