FNB fined R1 million for POPIA violations and data protection failures

First National Bank (FNB) has been fined R1 million by South Africa’s Information Regulator after being found in violation of several provisions of the Protection of Personal Information Act (POPIA) . The penalty follows an investigation that concluded the bank failed to adequately safeguard customers’ personal information and did not fully comply with certain data processing and retention requirements set out in the legislation. The regulator found that FNB had contravened Section 8 of POPIA in