How could a property company put an estimated 60m South Africans’ personal information into an insecure database file and on an insecure Web server that has now been linked to the biggest data breach in SA history? How did they manage to collate so much sensitive data about us without our permission? And how is it that they might get off scot-free for exposing potentially all of us to identity theft because legislation hasn’t yet been properly implemented?"Under existing common law, there are implications for companies that intentionally or negligently disseminate private information, but the process is arduous and the remedies are not significant," says astute media law expert Dario Milo from Webber Wentzel. A maximum fine of R10m could have been imposed if Popi had been properly enacted but the regulatory body, the Information Regulator, was only established this year, despite the act being enacted four years ago. After the story broke I was called by an astonished SA radio report...

Subscribe now to unlock this article.

Support BusinessLIVE’s award-winning journalism for R129 per month (digital access only).

There’s never been a more important time to support independent journalism in SA. Our subscription packages now offer an ad-free experience for readers.

Cancel anytime.

Would you like to comment on this article?
Sign up (it's quick and free) or sign in now.

Speech Bubbles

Please read our Comment Policy before commenting.