Privacy and data risk
Data problems quickly become legal, commercial and reputational problems.
We assist businesses with practical POPIA, privacy and data-risk questions, including policies, contractual obligations, data incidents and the legal issues created by new technology.
Where we can assist
- POPIA compliance and internal policies
- Privacy notices and consent wording
- Operator and vendor agreements
- Data-processing and confidentiality clauses
- Security-compromise response from a legal perspective
- Employee and customer information
- AI and personal-information risk
Cybersecurity incidents frequently require technical support, but they can also trigger notification, contractual, employment, evidential and liability questions. We work with the client’s technical advisers where appropriate while focusing on the legal response.
POPIA and privacy: practical questions
When should a business review its privacy position?
Useful triggers include launching a new system, changing vendors, collecting new categories of personal information, expanding marketing activity, adopting AI tools or experiencing a security incident.
Can vendor contracts create privacy risk?
Yes. Where a third party handles business or personal information, contractual provisions around processing, confidentiality, security, incident reporting, retention and termination should be assessed in context.
What if there has already been a data incident?
Preserve the facts and obtain technical and legal input promptly. The legal response may involve privacy, contractual, employment, evidential and notification questions. If the incident involves AI use, our AI and Technology Law service may also be relevant.
Start here
Tell us what data or privacy issue you need help with.
Please keep the description high level. If there has been a security incident, we can obtain the sensitive detail securely after first contact.
Submitting this form does not by itself create an attorney-client relationship. We will first review the enquiry, complete any required conflict checks and contact you about the appropriate next step.
