The Information Regulator has fined Central Johannesburg TVET College R500 000 and FNB R1 million for violating the Protection of Personal Information Act (POPIA).

Acting Senior Manager for POPIA Hangi Mbedzi says the college failed to comply with an enforcement notice issued after complaints about the unlawful processing of personal information.

FNB was fined after a security breach on its home loan platform exposed customer information.

Mbedzi says the penalties reflect the seriousness of the breaches and the risk posed to affected individuals.

“In the legislation in POPI in terms of section 109, there is criteria that the regulator is required to look at. Amongst that criteria is the nature of the personal information that was compromised, how many data subjects were compromised in that instance, and something else, whether there was a likelihood of distress or damage to the data subject. There is a criteria that is set out in the legislation which we are required to look at and that then assists us in determining the fine that we then issued to both CJC and First Ramp Bank.”

[COMING UP] The Information Regulator has fined Central Johannesburg TVET College R500 000 and First National Bank R1 million for violating POPIA #SABCNews #FirstTakeSA https://t.co/jhjxwpcPvH

— SABC News Radio (@SABCNews_Radio) October 27, 2026

RELATED VIDEO | South Africa’s Information Regulator gazettes new code of conduct – Mfana Gwala shares more

Source link