Connect with us

Technology

Experts Advise African Firms Processing EU Personal Data

Published

on

By Dipo Olowookere

A piece of advice has been given to organisations in Africa processing the personal information of data subjects from within the European Union (EU).

At an event hosted by Baker McKenzie and Cognia Law in Johannesburg, Head of the Technology, Media and Telecommunications Practice Group at Baker McKenzie in Johannesburg, Mr Darryl Bernstein, warned organisations doing such to already have effective General Data Protection Regulation (GDPR) compliance procedures in place, including Data Breach Security Checklists, impact assessments and subject data requests procedures.

Mr Bernstein said this due diligence is not only required by the GDPR regulation but can significantly reduce the risks associated with security breaches, raise awareness of the GDPR and ensure that companies have appropriate technical and organisational measures in place to comply with the legislation.

He further said it was essential for organisations to have a General Data Protection Regulation (GDPR) Data Security Breach Checklist in place to assess the risks of a data security breach and to implement a plan to contain and manage any data breaches.

Mr Bernstein noted that the first step on any organisation’s GDPR Data Security Breach Checklist should be to assess the risks associated with a data security breach.

“It is essential to know whose data might have been disclosed, what type of data has been breached and if it contains sensitive information.

“Affected organisations should also asses the volume of data disclosed and if any of the data has been lost or damaged. The cause of the breach and where in the world the breach occurred must also be investigated,” he said.

Mr Bernstein explained that step two on the Checklist should be to contain the breach and recover the data.

“Organisations who have fallen victim to a data breach must establish who will investigate the breach, who will assist with the containment of the breach and/or the recovery of information and if action should also be taken to prevent the breach from recurring. This is also the time to inform the police, if appropriate to do so,” the data expert said.

During step three, organisations must notify all data subjects who have had their private information breached.

“According to the GDPR, notification must take place without undue delay and no later than 72 hours after the breach has occurred. The nature and scope of the breach, as well as its consequences and the measures taken to rectify it, must also be disclosed to affected data subjects,” he said.

Mr Bernstein explained that South African organisations will have to have a similar checklist in place in order to comply to the soon to be implemented Protection of Personal Information Act (POPIA).

POPIA stipulates that a data breach must be notified as soon as reasonably possible after the discovery of the compromise, considering the legitimate needs of law enforcement or any measures reasonably necessary to determine the scope of the compromise and to restore the integrity of the responsible party’s information system.

To assist organisations in the event of a data breach, Baker McKenzie recently launched a mobile application called “Data Breach 72”. This app, which is available in English and French, allows organisations to identify the existence of a data breach, within the scope of application of the GDPR; establish whether it is necessary to notify the competent supervisory body; and prepare an initial draft of this notification. The app forms part of Baker McKenzie’s innovation programme, which aims to rethink the way in which lawyers deal with the challenges their clients are facing.

The final step in Checklist includes a thorough evaluation of the breach. “Once the first three steps are complete, organisations must investigate whether employees were responsible for the breach and if disciplinary action is required. If a third party was involved, the contract should be checked for damages provisions and an impact assessment undertaken. Lastly, organisations must review their procedures and ensure their data is secure going forward,” he said.

Also, partner in Baker McKenzie’s Corporate/M&A practice and TMT specialist, Janet MacKenzie, noted that, “The GDPR further requires organisations to complete a Data Protection Impact Assessment prior to the processing of private information, where the processing is likely to result in a high risk to the rights and freedoms of natural persons.

MacKenzie said it is essential to conduct an Impact Assessment of third parties that process high-risk company personal data, to determine their awareness of GDPR and to ensure that they have appropriate technical and organisational measures in place to comply with the legislation.

For high-risk third parties, audit partners should be identified for the assessment of processes and to determine if on-site audits are required. It is worth noting that the requirements of the GDPR stipulate that data processing can only be outsourced to a third party if the processor guarantees conformity with the requirements of the GDPR.

Janet Taylor Hall, CEO of Cognia Law, explained further, “There were two operational areas where clients tend to underestimate the impact assessment efforts around GDPR –  the first being adequately preparing to deal with a data breach when it happens and the second is subject data requests, which can in themselves lead to a breach if not handled appropriately.”

“Right of access is a core principle of the GDPR. Individuals have the right to access their personal data and supplementary information at any time. In responding to these data requests in time (30 days), it is also important that no data is shared that belongs to another individual or that contains intellectual property or trade secrets,” she said.

“Putting a robust subject data request capability in place is an important part of the on-going GDPR compliance support we offer our clients”, highlighted Justin Ridl, Global Head of Legal Services, Cognia Law.

Dipo Olowookere is a journalist based in Nigeria that has passion for reporting business news stories. At his leisure time, he watches football and supports 3SC of Ibadan. Mr Olowookere can be reached via [email protected]

Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

OPay, Coinbase, Others Crash as Cloudflare Suffers Another Glitch

Published

on

Daudu Gotring OPay

By Adedapo Adesanya

Cloudflare Incorporated, a business providing cloud-based services to various enterprises, said in a note on Friday it is investigating issues with its Dashboard and related Application Programming Interfaces (APIs).

Numerous companies and services, including payments platform like OPay as well as Canva, Coinbase Global Incorporated, Investing.com , Shopify Incorporated, and Zoom Video Communications Incorporated, all appeared to crash, with some seeing “500 internal server error” and “Please check your internet connection and try again”.

The global outage has left many users unable to access these key services as this disruption has not only affected individuals but also businesses relying on these platforms for their operations.

Customers using the Dashboard or Cloudflare APIs are impacted as requests might fail and errors may be displayed, the company said on its status page.

In its latest update, Cloudflare added that “a fix has been implemented,” with the firm monitoring the results.

Users from all over the world have taken to social media platform X (formerly Twitter) to voice their frustrations over the issue.

This is Cloudflare’s second major disruption in nearly a month, following another incident in November that affected services like Spotify and ChatGPT.

At the last outage, Cloudflare’s services were largely restored within three hours, and fully restored after approximately five hours.

Continue Reading

Technology

Google Unveils AI Skilling Blueprint for Africa

Published

on

Google AI Skilling Blueprint for Africa

By Modupe Gbadeyanka

As part of broader Africa-focused Artificial Intelligence (AI) initiatives, Google has launched the AI Skilling Blueprint for Africa, designed to help governments build a future-proof workforce.

The programme provides governments with a comprehensive, step-by-step guide to formulate national skilling strategies. It focuses on developing three critical cohorts: AI Learners, who will gain foundational AI literacy; AI Implementers, professionals upskilled to integrate AI tools into their work; and AI Innovators, deep technical experts dedicated to building the next generation of AI solutions.

Africa is home to the world’s youngest and fastest-growing population. The continent shows immense potential for AI-driven economic growth.

However, new research highlights a significant challenge: while optimism for AI is exceptionally high, reaching 95 per cent in Nigeria and 76 per cent in South Africa, 55 per cent of firms across the continent report needing AI talent more than financing. Closing this skills gap is key to unlocking Africa’s opportunity.

Google’s Vice President of Government Affairs and Public Policy, Doron Avni, explained that, “The AI Skilling Blueprint provides a clear roadmap for governments to build the workforce of the future.

“By also investing in AI-ready data and expert local organisations and partners, we are helping build the interconnected ecosystem needed for a prosperous, AI-driven future for the continent.”

As part of its broader initiatives, Google also announced $2.25 million to support projects building trustworthy public data sets for AI by the UN Economic Commission for Africa (UNECA), the UN Department of Economic and Social Affairs (UN DESA) and PARIS21.

This contribution will help national statistical offices modernize their infrastructure and empower decision-makers with the reliable data they need to address challenges from food security to economic growth.

“For Africa to drive sustainable development, evidence-based policymaking is indispensable. This requires accessible, reliable, and AI-ready data.

“This effort is a crucial step forward. By building a Regional Data Commons, we can empower African institutions with the data and tools they need to make strategic choices that will drive growth and prosperity,” the Executive Secretary of the UN Economic Commission for Africa, Claver Gatete, said.

Finally, building on its $7.5 million Google.org Skilling Fund commitment, Google announced the first set of expert social impact organizations who will receive funding to execute on projects consistent with its skilling mission, including FATE Foundation and the African Institute for Mathematical Sciences (AIMS), which will embed advanced AI curricula into universities; and JA Africa and CyberSafe Foundation, which will advance crucial work in online safety and digital literacy.

“We are incredibly proud to partner with the African Institute of Management Sciences on the Advanced AI UpSkilling Project, with support from Google.org. This groundbreaking initiative is a direct response to the urgent need for deep AI competencies in Africa, empowering tertiary institutions, lecturers, and students in Nigeria, Ghana, Kenya, and South Africa.

“This strategic support aligns perfectly with FATE Foundation’s mission to foster innovation and sustainable economic growth across the continent, ensuring Africa is fully equipped to lead in the global technological future,” the Executive Director for FATE Foundation, Adenike Adeyemi, stated.

“We live in an age defined by rapid technological change and our mission at JA Africa is to ensure that African youth are not left behind. However, even as we engage our youth in more digital programs and encourage AI literacy, we are fully aware of the harmful effects of unchecked online exposure and, therefore, invest equally in protecting their data, physical safety and mental wellbeing.

“Through this support from Google.org, we will give young people the tools, knowledge, and confidence they need to navigate the digital world safely and responsibly,” the chief executive of Junior Achievement Africa, Simi Nwogugu, remarked.

Continue Reading

Technology

Zoho Updates All-in-One Business Software Platform Zoho One

Published

on

Zoho One Update

By Modupe Gbadeyanka

Global technology firm, Zoho, has enhanced its all-in-one business software platform known as Zoho One with improve security, and deeper intelligence across all over 50 applications.

The company improved the user interface, placing context at the centre of the user journey and removes traditional boundaries between applications.

Spaces now organise tools by purpose—such as Personal, Organisation, and Department-specific groups—enabling employees to access what they need without switching between apps. A centralised search bar spans the entire ecosystem, allowing users to find information or trigger workflows instantly.

An enhanced Action Panel provides a full view of upcoming meetings, unread messages, pending tasks, and other key updates, helping employees remain informed regardless of which app they are using.

The updated Dashboard consolidates data from Zoho and third-party apps into one central hub that can be customised using pre-existing or bespoke widgets.

The platform also introduced Vani, a new visual-first collaboration space that supports brainstorming, planning, and creation through diagrams, whiteboards, mind maps, and integrated video calling.

A central integrations panel enables administrators to monitor and configure all connections. Foundational integrations bring application-specific portals—Zoho or third-party—into a single unified portal. Practical tasks such as domain verification and authentication can now be configured more easily.

The new Smart Offboarding feature introduces outcome-based integrations, allowing organisations to transfer department ownership, manage employee device data, and determine data access rights within a single workflow, ensuring smooth transitions.

Also, Zia, Zoho’s AI assistant, is now accessible throughout Zoho One, providing unified intelligence that supports decision-making and improves productivity. Zia can aggregate and contextualise information from various platforms, including third-party systems such as Google Workspace, and present it as clear, actionable insight.

Zia Hubs, the platform’s intelligent content management system, now has a dedicated space where contracts, meeting recordings, and other important assets are automatically organised. Through Zia Search, employees can quickly surface relevant information without navigating multiple locations.

In addition, Ask Zia, available from the bottom toolbar, enables prompt-based searches across Zoho One, providing quick visibility into schedules, tasks, recent interactions, and other key details.

Commenting on the changes, the Country Head for Zoho Nigeria, Mr Kehinde Ogundare, said, “The Zoho One update reflects how work has evolved from using individual applications to operating within a unified platform.

“Zoho One customers are not simply licensing apps; they are choosing a solution that allows Zoho to handle the technology while they focus on productivity. The enhancements announced today deliver a cohesive experience built on unified integrations, context, and data.”

Continue Reading

Trending