South Africa: Adopted data and cloud policy including establishment of data protection authority

On 31 May 2024, the Department of Communications and Digital Technologies adopted the data and cloud policy, which requires data protection authorities to ensure robust data security and privacy protection. It emphasises investigating breaches, raising public awareness, and periodically assessing privacy practices across government agencies, businesses, and online platforms. The policy highlights that the authorities must be adequately resourced to take enforcement actions, adapt legislation to address emerging cyber threats, and ensure the cybersecurity hub is equipped to manage digitisation risks.