Information Officers to Report Data Breaches from April
This article will count 0.25 units (15 minutes) of unverifiable CPD. Remember to log these units under your membership profile.
The Information Regulator has launched a new online system for reporting data breaches. From 1 April 2025, all public and private organisations must report security compromises (such as data leaks or hacks) through the eServices portal – email submissions are no longer accepted.
This move aims to speed up response times and improve oversight of personal information breaches under Section 22 of POPIA.
Why it matters
If your firm or your clients experience a data breach, it must now be reported via the online portal.
✅ A step-by-step guide is available on the portal to assist Information Officers with compliance.