Cyber Conduct

South African law

Cyber Law

South African online activity can be affected by more than one law. Cyber Conduct brings the main legal frameworks together so you can understand what each one is about and where it may become relevant.

Cybercrimes Act 19 of 2020

South Africa's primary cybercrime statute, covering offences involving computer systems and data, harmful data messages, jurisdiction and investigation.

Explore Cybercrimes Act →

Protection of Personal Information Act 4 of 2013

South Africa's main personal-information protection framework, covering lawful processing, security safeguards and data-subject rights.

Explore POPIA →

Electronic Communications and Transactions Act 25 of 2002

The legal framework for electronic communications and transactions, including data messages, electronic signatures and online consumer transactions.

Explore ECT Act →

RICA 70 of 2002

The framework governing interception of certain communications and the provision of certain communication-related information.

Explore RICA →

How these laws can overlap

A single online incident can involve more than one legal framework. For example, an online harassment situation may involve the Protection from Harassment Act, the Cybercrimes Act and privacy considerations depending on what happened. A data breach can raise POPIA issues while also involving criminal or contractual questions.

The presence of an online platform does not automatically tell you which law applies. The conduct, information involved, people affected and circumstances all matter.

Official sources

Important

Cyber Conduct provides general educational information, not legal advice. Legislation can change and the application of the law depends on the facts of each situation. For a specific legal matter, consider obtaining advice from a qualified legal professional or the relevant authority.