The Cybersecurity Bill becomes law

President Ramaphosa signed the new Act into law on 2 June. The Act compels electronic communications service providers and financial institutions to act when they become aware that their computer systems have been involved in a cybersecurity breach.

They must, according to the Act, report such offences to the South African Police Service (SAPS) within 72 hours of becoming aware of a breach and preserve any information which may be of assistance in the investigation. Non-compliance with this provision is a criminal offence and fines can be imposed.

This Act brings the country’s cybersecurity legislation in line with global standards. However the Cybercrimes Bill, which is supposed to support the new Act, still remains at Parliament with no indication of when it will be adopted.