PrivacyData Privacy and Cyber Security in South Africa

Data Privacy and Cyber Security in South Africa

In South Africa and the world as a whole, it can be said that the cyber risk and data privacy landscape is constantly evolving and thus it is imperative that we as individuals and business keep abreast of all potential risks as they emerge. But what are cyber attacks? This is a deliberate exploitation of your individual or company systems and/or network. Cyber attacks use malicious codes to compromise your computer, logic or data and steal, leak or hold your data hostage. Due to the breakout of the COVID-19 pandemic which drastically reshaped every aspect of our personal and professional lives one of the most understated, yet compelling impacts of the pandemic has been the risks associated with our personal cyber habits in a remote working environment.

Today we live in the digital age and with this businesses are facing new threats. Cyber- attacks and data breeches are the most common threats and must be considered a priority for SMEs. Large corporations usually have provisions in place to fight or prevent such attacks from taking place however, many small enterprises believe they are too small to face cyber-attacks, leaving them extremely vulnerable. Many small businesses do not understand the risks involved with one simple cyber-attack or data breech which can result in financial losses and, in severe cases, insolvency procedures.

In South Africa, we unfortunately do not have a clear definition of cyber- crime and because of this many investigations and prosecutions related to cyber-crime and data breaches have been hindered. Previously South African legislation did not fully respond to the challenges involved in combating cybercrime. This has changed with the newly enacted Cybercrimes Act (Cybercrimes Act 19 of 2020) which defines cybercrime as including, but not limited to, acts such as: the unlawful access to a computer or device such as a USB drive or an external hard drive; the illegal interception of data; the unlawful acquisition, possession, receipt or use of a password; and forgery, fraud and extortion online. Section 3 of the Act makes provision for offences relating to personal information (as defined in the POPI Act) including the abuse, misuse and the possession of personal information of another person or entity where there is reasonable suspicion that it was used, or may be used, to commit a cybercrime. South Africa has not merely moved from an old data and cyber- crime

protection legislation to an updated one but has also introduced data protection legislation for the first time.

With the enactment of the POPIA it has become mandatory for all organisations in South Africa to ensure compliance. Compliance with POPIA and the Cybercrimes Act does not mean merely drafting a privacy policy and calling it a day. Compliance requires that organizations must consider and implement mechanisms which allow for the fulfilment of the obligations under the aforementioned Acts. Given the increased importance on the right to privacy with the beginning of the COVID-19 pandemic, contact-tracing apps and the creation of national databases of sensitive information, the commencement of the act couldn’t have arrived at a better and much needed time.

It will be the responsibility of companies and individuals to ensure that they educate themselves on the necessary information and Acts relating to cyber security and data protection to avoid cyber-attacks and data breeches.

1. My top 5 tips for staying safe while online would include:
2. Keeping your software and systems fully up to date
3. Backing up your data
4. InstallingaFirewall
5. Controlling and limiting access to your systems
6. Trainingstaff