148  No. 50741 15.3.1.6. GOVERNMENT GAZETTE, 31 May 2024 All digital technologies used by the government should incorporate cybersecurity-by-design principles, including warning systems to detect and inform clients of potential cybersecurity threats in their infrastructure. This approach should cover the entire lifecycle of data collection, processing, use, storage, mining, and destruction. 15.3.1.7. The government shall prioritize the signing and ratification of regional, continental, and global treaties and conventions that support collaboration in the pursuit and prosecution of cybercrimes. The signing of such treaties must be guided by national interest, as articulated in the Framework Document on South Africa’s National Interest and its advancement in the Global Environment. Policy proposals 15.3.2. The government and private sector shall take appropriate security measures and adhere to South African data protection laws and protocols in the provision of data and cloud services. 15.3.3. The government, along with data and cloud service providers, must ensure robust data and cloud security measures are in place to mitigate cyber-attacks and data privacy violations, including establishing the necessary protocols. 15.3.4. All public bodies responsible for the protection of personal and government data shall conduct awareness campaigns to educate the public on the protection of personal data, privacy, and security. 15.4. Cross-Border Data Transfers and Data Sovereignty The free flow of data is an important catalyst for robust internet services and the global exchange and sharing of information and data. Many multinationals, based in South Africa and other countries, rely on an open cross-border data regime to be able to manage their businesses across different jurisdictions. Any restriction to such cross-border flows can have a negative impact on such businesses. South Africa is an investment destination for many multinationals that are supporting local economic growth and jobs required for sustainable livelihoods. POPIA provides for legal requirements regarding cross-border transfers of personal data. It is, however, possible that the South African government might be approached by other countries and organisations that seek data-sharing arrangements in certain areas, such as health, environment, fauna and flora. Where such requests might be viewed positively, it is 26 This gazette is also available free online at www.gpwonline.co.za