Less than 2 months after the commencement of the Protection of Personal Information Act (POPI) South Africa has had a large data breach. Approximately 24 million individuals and 800 000 companies have had their personal information held by the credit bureau Experian hacked.
Under POPI Experian is required to notify the Information Regulator. In addition, unless Experian has been notified by the Information Regulator or an authority investigating the crime not to do so, Experian will also have to notify every person and company whose personal information has been compromised.
Read more at Lexology…
