STAATSKOERANT, 31 Mei 2024
No. 50741 147
fighting, and prosecuting cybercrime. It is important for South Africa to examine existing
conventions and treaties on cybercrime prevention to determine the need to sign and ratify
those in the best interests of the Republic.
Citizens and enterprises might be prone to abuses by service providers due to a lack of
information or legal support in giving consent for what happens to their data or subscribing to
cloud services. Consent requests and service level agreements often contain complex, longwinded legal clauses that are difficult to process and understand. Customers may not be fully
informed about the implications of using a particular cloud service provider until they attempt
to switch providers and face unexpected complexities and potential data quality
compromises.
Consumers might be tempted to use affordable cloud providers until problems arise, revealing
that those providers lack the required capacity and competencies. Cloud providers should be
transparent about their credentials and provide detailed information, licenses, and
certificates.
Policy Interventions
15.3.1.
Data protection authorities shall be adequately resourced and capacitated to:
15.3.1.1.
Investigate, charge, and prosecute, where applicable, individuals involved in
data breaches as outlined in data security and privacy protection legislation and
policies.
15.3.1.2.
Conduct awareness campaigns to help citizens understand and assert their
rights concerning their data, as well as know how and where to report data
breaches and other abuses or violations as outlined in POPIA, the Cybercrimes
Act, and any other related policies and legislation.
15.3.1.3.
South African data security and data protection legislation and policies shall be
reviewed and adapted, when necessary, to ensure they are responsive to
emerging threats in the cyber environment.
15.3.1.4.
Data protection authorities should conduct periodic assessments of privacy
performances for government agencies, businesses, and online platforms,
taking appropriate action where breaches are discovered.
15.3.1.5.
The Minister shall ensure that the Cybersecurity Hub is adequately capacitated
and strengthened to respond to threats and risks associated with digitization.
25
This gazette is also available free online at www.gpwonline.co.za
Sélectionner le paragraphe cible3
Se connecter à un paragraphe
Connect to an entity
Disable highlights
Ajouter à la table des matières