National Department of Health

Referred to enforcement committee. Information Regulator, 21 February 2023.

Record ID: za-ir-2023-0001
Jurisdiction: South Africa
Regulator: Information Regulator
Type: investigation
Date decided: 21 February 2023
Respondent type: public
Sector: government
Violations: PAIA non-compliance, failure to respond to information notice
Provisions cited: PAIA 2000
Outcome: referred to enforcement committee
Status: ongoing
Source: Official document ↗
Source integrity: SHA-256 6a0ac4af6eae62a6…
Record verified: 30 July 2026

The facts

The Information Regulator referred the National Department of Health to its enforcement committee after the department repeatedly failed to confirm whether it de-identified or destroyed the personal data collected in the COVID-19 electronic contact-tracing database once the national state of disaster lifted. The requests included a formal information notice issued in November 2022.

Orders and outcome

Referral to the enforcement committee, which may culminate in an enforcement notice including an administrative fine. Reported February 2023.

PAIA · ACCESS-TO-INFORMATION · COVID-19

Cite this decision

Information Regulator (South Africa), National Department of Health, investigation of 21 February 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/south-africa/information-regulator/2023/national-department-of-health-paia-covid-data/ (accessed 30 August 2026).

Track South Africa enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.