South Africa’s Information Regulator Confirms Accidental Email Leaks Are Data Breaches Under POPIA

On September 6, 2022, the acting Chief Financial Officer of Central Johannesburg TVET College made a mistake while sending emails about finance policies to her team. She accidentally attached a folder with employees’ credential verification reports, which included academic qualifications and criminal record checks. This email went to staff members who were not allowed to see those files.