AI GOVWorld Map
← World Map
Nation state

South Africa

Decentralized, sector-based oversight built on existing regulators (data protection, financial, health) rather than a standalone AI law, with a national AI policy currently being redrafted after a citation scandal

Reviewed August 28, 2026

No significant developments in the past 30 days.

Country Overview

South Africa does not have a standalone AI act, and its approach to date has combined a sector-by-sector regulatory model with a slow-moving national AI policy process. The Department of Communications and Digital Technologies (DCDT) released an initial AI Policy Framework in October 2024, proposing to lean on existing bodies β€” the Information Regulator under the Protection of Personal Information Act (POPIA), the Financial Sector Conduct Authority and South African Reserve Bank for financial AI, and the South African Health Products Regulatory Authority (SAHPRA) for medical AI β€” rather than create a single AI super-regulator, alongside a four-tier risk classification broadly modelled on the EU AI Act.

That process suffered a significant setback in April 2026: after Cabinet published a draft National AI Policy for public comment on April 2, 2026, reporting on April 26 revealed that at least several of the document's roughly 67 references were AI-fabricated, non-existent citations. Minister of Communications and Digital Technologies Solly Malatsi withdrew the draft on April 27, 2026, calling the episode "embarrassing" and pledging consequences for those responsible for drafting and quality assurance. In May 2026, Malatsi appointed an independent expert panel β€” chaired by Wits University's Professor Benjamin Rosman and including Professor Vukosi Marivate, Professor Alison Gillwald of Research ICT Africa, and others β€” to authenticate references and guide a redraft, with the revised policy targeted for Cabinet submission by November 2026 and public comment expected around January 2027.

At a Glance

Overall AI policy direction

National AI policy withdrawn and under independent redraft

3

Major AI companies

3

Research institutions

2

Live debates

Latest development
July 29, 2026
Regulatory approach
Decentralized, sector-based oversight (POPIA/Information Regulator, FSCA, SAHPRA) rather than a single AI-specific regulator, per the withdrawn draft's four-tier risk model
Major AI companies
DataProphet, Aerobotics, Lelapa AI
Major cloud providers
AWS, Microsoft Azure, Google Cloud
Leading research institutions
University of the Witwatersrand (Wits), University of Cape Town (UCT), University of Pretoria
Key ministries
Department of Communications and Digital Technologies (DCDT), Information Regulator (South Africa)
Government involvement
Active but currently in a reset phase β€” the DCDT-led national AI policy process was paused mid-2026 pending an independent review
Industrial strategy
Emphasis in policy drafts on local datasets and African-language AI processing, alongside applied AI activity in agriculture, manufacturing and language technology
International partnerships
Research ICT Africa's Africa Just AI project (funded by IDRC and the FCDO) is a notable example of cross-border AI-policy research collaboration
Primary policy focus
Rebuilding the National AI Policy through the independent expert panel process, targeting Cabinet submission by around November 2026

Current Direction

Stable

South Africa's AI governance trajectory was disrupted rather than accelerated in 2026: the government's first attempt at a full National AI Policy was withdrawn after a citation-fabrication scandal, and the policy is now being rebuilt by an independent academic-led panel with a target of reaching Cabinet by around November 2026. In the interim, existing sector regulators (data protection, financial, health) continue to apply general law to AI use cases, and no dedicated AI statute has been introduced in Parliament.

Recent Developments

6 this cycle
  • Following the June 2026 withdrawal of the hallucination-tainted draft National AI Policy, the Department of Communications and Digital Technologies said the redrafted policy -- being rebuilt by an independent expert panel led by Prof Benjamin Rosman -- would take a light-touch approach (29 July 2026): steering sectors to develop their own AI strategies and leveraging existing regulators such as Icasa and the Information Regulator instead of creating seven new institutions. The department targeted Cabinet presentation by November 2026, with January 2027 as a fallback.

    2026-07-29
  • Malatsi appoints an independent expert panel, chaired by Wits University's Professor Benjamin Rosman and including Professor Vukosi Marivate and Professor Alison Gillwald, to authenticate references and guide a full redraft of the AI policy.

    2026-05-12
  • Minister Solly Malatsi withdraws the draft National AI Policy after reporting revealed its reference list contained AI-fabricated, non-existent academic citations.

    Major
    2026-04-27
    SourceTimesLIVE
  • South African Cabinet publishes a draft National AI Policy for public comment, built on a four-tier risk model and a decentralized regulatory approach relying on existing sector agencies.

    2026-04-02
    SourceTechCabal
  • During its 2025 G20 presidency, South Africa foregrounds AI and digital public infrastructure as headline themes β€” convening a G20 Task Force on AI, Data Governance and Innovation for Sustainable Development and promoting an 'AI for Africa' agenda β€” before the rotating presidency passes to the United States for 2026.

  • Department of Communications and Digital Technologies publishes South Africa's AI Policy Framework, proposing a human-centred, risk-based, sector-led approach as the basis for a future national AI policy.

    2024-10-01
    SourceBowmans

Policy and Regulation

3 tracked

Protection of Personal Information Act (POPIA)

In force

General data-protection law enforced by the Information Regulator; forms the main current legal lever over AI systems that process personal data, including automated decision-making.

SourceTechCabal

National AI Policy Framework

In force

October 2024 discussion document from the DCDT proposing sector-based, risk-tiered AI oversight; a preliminary framework rather than binding law, superseded in status by the since-withdrawn 2026 draft policy.

SourceBowmans

Draft National AI Policy (2026)

Repealed

Published for public comment on April 2, 2026, then withdrawn on April 27, 2026, after being found to contain AI-fabricated citations. Being rebuilt by an independent expert panel, with Cabinet submission targeted for around November 2026.

Research Ecosystem

South African AI research is anchored significantly at the University of the Witwatersrand (Wits), whose School of Computer Science and Applied Mathematics and Machine Intelligence and Neural Discovery (MIND) Institute host a notable concentration of AI researchers on the continent, and which hosted the first Deep Learning Indaba in 2017 β€” a pan-African machine learning conference founded partly in response to the near-total absence of African-institution papers at top ML venues. Research ICT Africa, based in Cape Town and affiliated with the University of Cape Town, is a leading policy-research think tank on AI and digital rights across Africa, led by founding director Professor Alison Gillwald.

Major AI Companies

3

Cloud Infrastructure

Frontier AI
No domestic frontier developer
Compute
Africa's largest data-centre market (e.g. Teraco); hyperscaler cloud regions and continued AI-infrastructure investment, including a reported Microsoft cloud/AI commitment in 2026
Chip access
Import-reliant; no domestic advanced-chip fabrication

AWS

Operates cloud infrastructure serving South African enterprise and startup AI workloads, including a Cape Town region.

Microsoft Azure

Cloud provider with a significant South African enterprise footprint.

Google Cloud

Cloud provider used across South African research and enterprise AI.

Notable Gaps

2
  • Binding national AI policy

    South Africa's draft National AI Policy was withdrawn in April 2026 after fabricated citations were discovered; as of mid-2026 there is no adopted national AI policy, only the 2024 preliminary framework and a redraft in progress.

  • Dedicated AI regulator

    South Africa has explicitly chosen not to create a standalone AI regulator, relying instead on existing sector bodies (Information Regulator, FSCA, SAHPRA) β€” a deliberate design choice rather than an oversight gap, but one whose coordination mechanisms remain unbuilt while the national policy is being redrafted.

Key People

4
DCDT→
Information Regulator→
Wits MIND Institute→
Research ICT Africa→
Lelapa AI

People and Organisations to Follow

3

Current Debates

2 live
Government

Withdrawal of the draft National AI Policy over AI-fabricated citations and what it means for government AI use

The April 2026 withdrawal of South Africa's draft National AI Policy, after its reference list was found to contain AI-generated fictitious sources, became a widely discussed cautionary case about unverified AI use inside government itself.

β–Ύ

Minister Malatsi described the episode as a failure of human oversight rather than of the policy's substantive content, and pledged consequences for those responsible for drafting and quality assurance. Commentators, including some South African legal and media outlets, characterised the incident as "embarrassing and damning," and it has fed into the broader debate about how the government can credibly regulate AI risk (including hallucination and verification failures) while its own drafting processes remain vulnerable to the same failure modes.

Government

Whether a decentralized, sector-regulator model can substitute for a dedicated AI law

South Africa's policy approach β€” leaning on the Information Regulator, FSCA, SAHPRA and other existing bodies rather than a single AI authority β€” is a deliberate design choice that remains contested among policy observers.

β–Ύ

Proponents argue this avoids duplicating regulatory expertise and lets AI oversight be embedded in bodies that already understand their sectors. Critics, including some of the independent panel members now redrafting the policy, have raised concerns about coordination gaps, unclear escalation paths for cross-sectoral AI harms, and the fact that the coordinating bodies proposed in the withdrawn draft (a National AI Coordination Office, inter-departmental forums, an AI Advisory Council) would lack binding enforcement powers even once established.

Knowledge Hub

3 curated

Sources

10 cited

Deliberately sourced beyond government publications. The bars below show each category’s actual share of this page’s citations β€” an internal editorial guideline rather than a rigorously derived target, so treat it as a rough steer, not a precise benchmark.

Research 30%Think tanks 30%News 40%
  1. South Africa: Department of Communications and Digital Technologies releases Artificial Intelligence Policy FrameworkThink tanksBowmans2024-10
  2. Why South Africa is taking a different path to AI regulationNewsTechCabal2026-04-09
  3. Minister Malatsi withdraws draft AI policyNewsTimesLIVE2026-04-27
  4. Professor Benjamin Rosman leads South Africa's AI policy panelResearchWits University2026-05
  5. Malatsi sets up team of experts after AI policy blunderNewsTimesLIVE2026-05-12
  6. Deep Learning IndabaResearchWikipedia2026
  7. AI at Wits - The Machine Intelligence and Neural Discovery (MIND) InstituteResearchWits University2026
  8. Research ICT AfricaThink tanksResearch ICT Africa2026
  9. DPI and AI are steering South Africa's G20 Presidency agendaThink tanksWorld Economic Forum2025-04
  10. Radical rethink for South Africa's national AI policyNewsTechCentral2026-07-29