Authority: Regulator - SA
Jurisdiction: South Africa
Relevant law: Protection of Personal Information Act, 2013
Type: N/A
Outcome: N/A
Started: March 2022
Decided: N/A
Published: N/A
Fine: N/A
Parties: Regulator vs. Independent Electoral Commission
Case No.: N/A
Appeal: N/A
Original Source: POPIA
Original contributor: MZIZI Africa

Contents

  1. Summary
    1. Facts
    2. Holding
  2. Holding
  3. Comment
  4. Further resources
  5. Decision

Summary

The Information Regulator is undertaking an independent assessment of the Independent Electoral Commission in relation to a breach of personal data which saw candidate lists related to two political parties, the ANC and uMkhonto weSizwe, circulated or disclosed in a manner not authorised for the 2024 national and provincial elections.

Facts

In March 2024, the Regulator received two (2) security compromise notifications from the IEC following an unauthorised release of candidate lists related to two political parties, the ANC and uMkhonto weSizwe, that have been circulated or disclosed in a manner not authorised for the 2024 national and provincial elections.

Consequently, the Regulator issued an Information Notice to the IEC seeking further information from the IEC. Following a preliminary assessment of the information obtained from the IEC, the Regulator has decided to proceed with a full assessment of the security compromise suffered by the IEC.

Holding

The matter is pending investigation.

Comment

The ruling is not due yet but a press release by the Regulator is attached.

Further resources

InfoReg demands answers on political candidate lists leak

Decision

South Africa Information Regulator Notice .pdf