Webinar | Session 2: Data Governance, Privacy and Cross-Border Flows

Value of the Information & Strength of the Argument

The webinar provides substantial value by offering a multi-stakeholder perspective on AI data governance in South Africa. Professor Papadopoulos delivers a well-structured argument for institutional coherence, using the withdrawn draft policy as a case study. She effectively distinguishes between horizontal and vertical regulation and proposes a pragmatic model of a single coordinating authority. Advocate Stroom provides authoritative insights into the Information Regulator’s mandate and enforcement approach, grounding the discussion in existing legal frameworks. Mr. Skosana offers a practical industry viewpoint, highlighting the need for regulatory clarity to foster innovation. The argumentation is generally solid, with speakers building on each other’s points and addressing counterarguments. However, the discussion is largely policy-oriented and lacks empirical evidence or case studies to support some claims. The value lies in its expert analysis and actionable recommendations for policymakers.

Scientific Rigor, Source Quality, Title Accuracy

The webinar demonstrates a high level of scientific rigor in its reliance on existing legal frameworks, particularly POPIA and PAIA. The speakers are recognized experts in their fields, and their arguments are grounded in legal analysis and practical experience. However, the webinar does not cite specific academic sources or empirical studies, relying instead on expert opinion and legal interpretation. The title accurately reflects the content, focusing on data governance, privacy, and cross-border flows. The discussion is well-structured and stays on topic. The absence of citations is a minor weakness, but the overall rigor is high given the nature of the webinar as a policy dialogue.

The title accurately reflects the session's focus on data governance, privacy, and cross-border flows in the context of AI policy.

8/10

The webinar features three expert speakers with relevant academic, regulatory, and industry backgrounds. The discussion is structured and grounded in existing legal frameworks (e.g., POPIA), with clear arguments and practical recommendations. However, it is a policy dialogue rather than a peer-reviewed study, and some claims are not backed by specific citations.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 00:00Introduction and welcome by the moderator, setting the stage for the session on data governance, privacy, and cross-border flows.
• 05:00Professor Papadopoulos begins her presentation on data sovereignty and institutional coherence in South Africa's AI governance framework.
• 10:00Discussion on the role of POPIA in AI governance and the need to map its principles across the AI lifecycle.
• 15:00Analysis of Section 71 of POPIA on automated decision-making and its limitations in addressing AI harms.
• 20:00Proposal for a single AI-specific statutory authority to coordinate across regulators, avoiding fragmentation and proliferation.
• 25:00Discussion on data sovereignty, emphasizing enforceable control rather than crude localization, and the importance of cross-border data flows.
• 30:00Advocate Stroom begins her presentation on the Information Regulator's mandate and role in AI governance.
• 35:00Advocate Stroom discusses the regulator's dual mandate under POPIA and PAIA, and the need for a risk-based approach to AI.
• 40:00Siyabonga Skosana presents an industry perspective on AI governance, highlighting practical challenges and the need for regulatory clarity.
• 45:00Q&A session begins, with audience questions on enforcement, international cooperation, and business implications.

• Protection of Personal Information Act (POPIA) — Referenced as the primary legal framework for data protection in South Africa.
• Promotion of Access to Information Act (PAIA) — Mentioned as part of the Information Regulator's dual mandate.
• South Africa's Draft National AI Policy — Discussed as the withdrawn policy that prompted this dialogue.

• OECD AI Principles — Aligns with the webinar's emphasis on risk-based approaches and human oversight.
• Information Regulator South Africa — Official website of the regulator, providing context on its mandate and activities.

• None — No discordant sources were identified in the webinar.