Liberty Life Swaziland Limited

Enforcement notice issued; warning imposed. EDPA, June 2024.

Record ID

sz-edpa-2024-0002

Case reference

EDPA Notice 4/2024

Jurisdiction

Eswatini

Regulator

EDPA

Type

enforcement notice

Date decided

June 2024

Respondent type

private

Sector

banking

Violations

failure to implement security measures, failure to prevent data breach

Provisions cited

Section 14(1)(b) DPA 2022, Section 14(2) DPA 2022, Section 17(1)(a) DPA 2022, Section 41(1)(a) DPA 2022

Outcome

enforcement notice issued; warning imposed

Status

final

Source

Official document ↗

Source integrity

SHA-256 c3a7900862eac2df…

Record verified

30 July 2026

The facts

Liberty Life Swaziland Limited notified the Eswatini Data Protection Authority that an employee had erroneously copied an external person into an internal email containing the names, surnames and identity numbers of 4,174 data subjects. The company informed the affected client, engaged the unintended recipient to delete the email, and supplied further particulars at the Authority's request. The EDPA found the company had failed to secure the integrity of personal information through appropriate technical and administrative measures and to identify, safeguard against and keep updated protections for foreseeable risks.

Orders and outcome

The EDPA issued an enforcement notice imposing a warning, valid for one year provided no same or similar breach occurs, and directed the company to encrypt personal data shared by email with passwords sent by separate media, present its confidentiality notice in email, train all employees regularly with attendance records kept, implement alerts for outbound external email, and document communication processes; a comprehensive progress report was due to the EDPA within three months of receipt. Dated June 2024.

INSURANCE · MISDIRECTED-EMAIL · BREACH-NOTIFICATION · WARNING

Cite this decision

Track Eswatini enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.