World Watch/South Africa/Artificial Intelligence

Artificial Intelligence · South Africa

Artificial Intelligence - South Africa

ProposedDraft National Artificial Intelligence Policy (DCDT, published 10 April 2026, withdrawn 26/27 April 2026); no AI-specific statute. AI activity currently governed by general laws, chiefly POPIA, administered by the Information Regulator.

South Africa has no comprehensive AI-specific law in force; AI is currently governed indirectly through general legislation such as the Protection of Personal Information Act (POPIA), the Cybercrimes Act, the Consumer Protection Act and the Electronic Communications and Transactions Act. The Department of Communications and Digital Technologies (DCDT) advanced a Draft National AI Policy through Cabinet and gazetted it for 60 days of public comment in April 2026, but the Minister withdrew it later that month after at least six of its academic citations were found to be AI-fabricated. A revised draft is expected, leaving the country in a pre-legislative, policy-development phase.

No AI-specific statute

There is no codified, standalone AI law in South Africa; AI is regulated indirectly via existing technology-neutral and sectoral legislation rather than a dedicated AI Act.

Draft National AI Policy gazetted then withdrawn

Cabinet approved publication (25 March / 1 April 2026) and the Draft National AI Policy was gazetted on 10 April 2026 for a 60-day comment period (closing 10 June 2026), proposing a risk-based, human-centred framework.

Withdrawal over fabricated citations

Minister Solly Malatsi withdrew the draft on 26/27 April 2026 after reporting revealed at least six of 67 academic citations were non-existent (apparently AI-hallucinated); he called it an 'unacceptable lapse' and promised a revised draft with stricter oversight.

POPIA as the de facto baseline

The Protection of Personal Information Act governs AI processing of personal data—including profiling, automated decision-making, transparency, accuracy and cross-border transfers—and is enforced by the Information Regulator.

Other applicable general laws

The Cybercrimes Act (data/system interference), the Consumer Protection Act (fairness/safety of products), and the Electronic Communications and Transactions Act (automated processes) apply to AI use, alongside sectoral rules in finance, health and telecoms.

Earlier policy groundwork

The DCDT published an AI Policy Framework / discussion material in 2024 emphasising responsible adoption, data governance, infrastructure and skills, providing the conceptual basis the later draft policy built upon.

Machine-assisted translation · verified 5/23/2026 · orientation, not legal advice. English version →