Lancet Laboratories has been fined R100 000 following high-profile data breaches, leaks and other security incidents as well as failing to respond to SA Information Regulator’s demands to address shortcomings in its systems, reports MedicalBrief (27 Nov 2025)
“The Information Regulator issued the enforcement notice after it found Lancet had not notified people that their data had been exposed within a reasonable period, as required under the Protection of Personal Information Act (POPIA), and it had been ordered to urgently implement adequate security safeguards to protect personal information and prevent unauthorised access.”
During the 2024/25 financial year, 2 374 data breaches were reported, with an average of 198 notifications per month.