Liberty Life Swaziland Limited

Enforcement notice issued; warning imposed. EDPA, June 2024. month-precision date

Record ID

sz-edpa-2024-0002

Case reference

EDPA Notice 4/2024

Jurisdiction

Eswatini

Regulator

EDPA

Type

enforcement notice

Date decided

June 2024

Respondent type

private

Sector

banking

Violations

failure to implement security measures, failure to prevent data breach

Provisions cited

Section 14(1)(b) DPA 2022, Section 14(2) DPA 2022, Section 17(1)(a) DPA 2022, Section 41(1)(a) DPA 2022

Outcome

enforcement notice issued; warning imposed

Status

final

Source

Official document ↗

Record verified

11 July 2026

Summary

Liberty Life Swaziland self-notified the EDPA after an employee erroneously copied an external recipient on an internal email containing the names, surnames and identity numbers of 4,174 data subjects. The Authority found breaches of sections 14(1)(b) and 14(2), imposed a warning valid for one year, and directed remedial measures including encryption of personal data sent by email with passwords shared through a separate channel, external-recipient alerts, regular documented staff training, and a progress report within three months.

INSURANCE · MISDIRECTED-EMAIL · BREACH-NOTIFICATION · WARNING

Cite this decision

Track Eswatini enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.