Electoral Commission of South Africa (IEC)

Enforcement notice issued. Information Regulator, 11 September 2024.

Record ID: za-ir-2024-0005
Jurisdiction: South Africa
Regulator: Information Regulator
Type: enforcement notice
Date decided: 11 September 2024
Respondent type: public
Sector: government
Violations: inadequate access controls, unauthorised disclosure, inadequate security safeguards
Provisions cited: POPIA 2013 s.19
Outcome: enforcement notice issued
Status: final
Source: Official document ↗
Record verified: 14 March 2026

Summary

The Information Regulator issued an enforcement notice against the Electoral Commission after the unauthorised release of ANC and MK party candidate lists ahead of the 2024 elections. The IEC lacked adequate access controls to protect the confidentiality of personal information in its possession.

ELECTIONS · UNAUTHORISED-DISCLOSURE · ACCESS-CONTROLS

Cite this decision

Information Regulator (South Africa), Electoral Commission of South Africa (IEC), enforcement notice of 11 September 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/south-africa/information-regulator/2024/electoral-commission-candidate-data/ (accessed 22 July 2026).

Track South Africa enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.