South African Police Service (SAPS)

Enforcement notice issued. Information Regulator, 6 April 2023.

Record ID: za-ir-2023-0002
Jurisdiction: South Africa
Regulator: Information Regulator
Type: enforcement notice
Date decided: 6 April 2023
Respondent type: public
Sector: government
Violations: unlawful processing, failure to notify security compromise, inadequate breach notification
Provisions cited: POPIA 2013
Outcome: enforcement notice issued
Status: final
Source: Official document ↗
Record verified: 14 March 2026

Summary

The Information Regulator issued an enforcement notice against the South African Police Service on 6 April 2023 after SAPS failed to notify the regulator and affected data subjects of a security breach. The notice required SAPS to notify data subjects, publish an apology, investigate the members responsible, and provide POPIA training.

BREACH-NOTIFICATION · SECURITY-SAFEGUARDS · LAW-ENFORCEMENT

Cite this decision

Information Regulator (South Africa), South African Police Service (SAPS), enforcement notice of 6 April 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/south-africa/information-regulator/2023/south-african-police-service-breach-notification/ (accessed 22 July 2026).

Track South Africa enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.