This dossier contains 30 indexed evidence records connected to South Africa and African Union. Use the filters to inspect status, instrument type, and topic coverage—including deepfakes, synthetic media, AI-generated content, detection, and KYC—without treating a summary as a legal conclusion.
30indexed records
1source files
12indexed topics
Evidence boundary
A registry record is not a legal opinion.
The cards below reproduce the registry's evidence boundary. A partial record stays partial, and an absent field is shown as not recorded. This informational research is not legal advice or a compliance certification. Detection results, labels, watermarks, provenance records, and biometric or KYC controls do not prove authenticity or compliance.
Source files in this dossier
research/south-africa-africa.md
Indexed evidence
Regulation records
Showing 30 of 30 records
Active law, partial
1. Protection of Personal Information Act 4 of 2013 (POPIA)
Law Or Treaty
CitationNot recorded in registry
Covered actors
Responsible parties/controllers, operators/processors, information officers, data subjects and the Information Regulator.
Neutral effect or obligation summary
Lawful, minimal, purpose-limited, transparent and secure processing data-subject access, correction, objection and related rights operator contracts and oversight breach notification to the Regulator and affected data subjects where required controls for cross-border transfers and records/governance appropriate to risk.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionProvenance And Labeling
6. Films and Publications Act 65 of 1996, Amendment Act 11 of 2019 and 2022 regulations
Regulation Or Rule
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Registration/licensing or accreditation for applicable online distributors classification or self-classification processes complaints and prohibited-content handling cooperation and information duties in specified circumstances child-protection and harmful-content controls.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
8. Financial Intelligence Centre Act 38 of 2001 (FICA), FIC guidance and HANIS verification
Proposal
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Establish and verify identity understand the business relationship identify beneficial owners and persons acting for clients apply a risk-based approach maintain an RMCP keep records report suspicious/unusual transactions and comply with sanctions and supervisory requests.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationFinancial Services
9. SARB Directive 1 of 2024 — cybersecurity and cyber-resilience in the National Payment System
Regulation Or Rule
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Maintain proportionate cybersecurity and cyber-resilience frameworks protect confidentiality, integrity and availability identify critical functions/assets use protective controls including access control and encryption detect, respond to and recover from cyber-attacks test resilience report incidents and support supervision.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationCybersecurityPlatform Safety And ContentFinancial Services
10. Joint Standard 2 of 2024 — cybersecurity and cyber resilience for financial institutions
Framework Or Standard
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Sound governance, risk management, cybersecurity and cyber-resilience processes, tools and technologies prevention, detection, response, recovery, oversight of material dependencies and reporting/assurance expectations.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationCybersecurityFinancial Services
11. FSCA Regulatory Strategy 2025–2028 and AI supervisory work
Guidance
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
The strategy itself is not a standalone licence or detailed technical standard. Firms remain subject to existing conduct, governance, prudential, cyber, consumer and privacy requirements, applied in an AI context through supervision and future instruments.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationPrivacy And Data ProtectionFinancial Services
12. SARB Payments Ecosystem Modernisation, Digital Financial Identity and Vision 2030+
Proposal
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionFinancial ServicesProvenance And Labeling
14. South African G20/DCDT generative-AI and deepfake issue brief
Guidance
CitationNot recorded in registry
Covered actors
Government, platforms, researchers, technology firms, civil society and international partners.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
15. AU Convention on Cyber Security and Personal Data Protection (Malabo Convention)
Type not recorded
CitationNot recorded in registry
Covered actors
AU Member States that ratify/accede, national data-protection authorities, cybersecurity bodies, public/private data controllers and electronic-transaction actors.
Neutral effect or obligation summary
Establish legal and institutional frameworks for personal data, electronic transactions and cybersecurity protect privacy and fundamental rights provide security and cybercrime measures regulate data processing and cross-border flows in accordance with the Convention’s framework.
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityProvenance And Labeling
Neutral effect or obligation summaryNot recorded in registry
Enacted or issued
Feb 18, 2024
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentFinancial Services
25. Nigeria — NDPA, election integrity, identity and cyber-enabled fraud
Type not recorded
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
26. Kenya — data protection, biometric elections, cybercrime and AML
Type not recorded
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
27. Ghana — DPA, CSA election response and accountable-entity controls
Proposal
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
28. Rwanda — privacy, cybercrime, elections and regulated payments
Type not recorded
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
29. Egypt — data protection, national AI policy, elections and financial-sector controls
Guidance
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentFinancial ServicesProvenance And Labeling
30. Morocco — CNDP privacy, cybersecurity, digital trust and AML/KYC
Type not recorded
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified dateNot recorded in registry
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentElections And Political ContentChild SafetyFinancial ServicesProvenance And Labeling
