Social media activity and usage
Platforms ranked by usage in 2023*
1.Facebook
2. YouTube
3. TikTok
4. Instagram
5. LinkedIn
Current laws and regulations relevant to social media
Currently, there is no specific legislation governing social media use or platforms in South Africa. Social media platforms and users must operate within the existing regulatory framework, which regulates, amongst others, the types of content which can be displayed and distributed, advertising, consumer protection, cybercrimes, data protection, electronic communications, and intellectual property.
Consumer Protection Act 68 of 2008 (CPA)
- The CPA was enacted to promote and protect the economic interests of consumers and to ensure a fair, accessible, efficient, sustainable and responsible consumer market. It applies to every transaction occurring in South Africa, and the promotion of goods and services in South Africa, subject to certain exceptions. The provisions of the CPA are relevant to social media platforms and users as these platforms are widely used to promote goods or services to consumers, and even to facilitate transactions.
- In addition to the common law consumer protection rights, the CPA provides consumers with a number of rights, and places corresponding restrictions on suppliers. These consumer rights include, but are not limited to, the right to privacy, disclosure of information, fair and reasonable marketing, and the right against discriminatory marketing.
Defamation
- The right to freedom of expression, including freedom of the press and other media, is enshrined in section 16 of the Constitution of the Republic of South Africa, 1996. However, this right is not without limitation.
- Defamation in South Africa stems from the common law. It is the wrongful, and intentional publication of words or behavior concerning another person which has the effect of injuring a person’s status, good name, or reputation. The criteria to determine if a publication constitutes defamation is whether the claimant’s good name has in fact (objectively) been infringed in the view of the ordinary and reasonable person, and that the defamatory words are not true or in the public interest.
- Defamation claims relating to social media posts are prevalent, due to the very nature of social media – namely, the publication and exchange of information. Ordinarily, a claim for defamation entails a claim for damages between the claimant and the defendant concerned; however, there is also scope for criminal claims. Under South African law the claimant may also obtain an interdict (injunctive relief) to force the defendant to remove the offending posts, without having to first prove any damages, or to give security.
Electronic Communications and Transactions Act 25 of 2002 (ECTA)
- The purpose of ECTA is to enable and facilitate electronic communications and transactions within South Africa. It regulates data messages and electronic transactions, and provides that agreements may be concluded wholly or partly by means of data messages.
- To ensure certainty of the terms, and to comply with the provisions of ECTA, the terms governing the relationship of the social media platform and the user (whether as a supplier, consumer, or otherwise) should be readily available to the user, on the app, website, or elsewhere.
- Furthermore, chapter 7 of ECTA includes a number of consumer protection obligations which apply to electronic transactions. These include, but are not limited to, prescribing cooling-off periods within which consumers are entitled to cancel a transaction without reason or penalty, and requiring suppliers to make specific information available to consumers on the social media platform where the goods or services are offered, and to use a sufficiently secure payment system.
Advertising Regulatory Board (ARB)
- The ARB is an independent body established and paid for by its members in the broader marketing and communications industry, to protect South African consumers through the self-regulation of advertising in the public interest (Source). Membership of the ARB is not mandatory. The ARB established the Code of Advertising Practice (Code), which binds members of the ARB, and includes a specific Social Media Code. The Code is based on the International Code of Advertising Practice, issued by the International Chamber of Commerce.
- The purpose and goals of the Code are to regulate its members to create legal, decent, honest and truthful advertising, to regulate commercial advertising in ensuring that it is prepared with a sense of responsibility to the consumer and conforms to the principles of fair competition in business, and to regulate advertising conducted by government departments and agencies and those persons in non-commercial organizations (excluding the political sphere).
- All advertisers on social media platforms that are members of the ARB must comply with the Code. The ARB and the Code do not have jurisdiction over entities that are not members.
Films and Publications Act 65 of 1996 (FPA)
The FPA was established to regulate the creation, production, possession and distribution of films, games and certain publications, which includes, amongst other things, the distribution of media on social media platforms. It prohibits certain conduct, such as the distribution of media for the purpose of propaganda for war, incitement of violence and advocacy of hate speech, or the distribution of private sexual photographs and films. The protection of children is one of the key aims of the FPA. It prohibits, amongst other actions, the filming and distribution of films and photographs depicting sexual assault and violence against children, and criminalizes the possession, production and distribution of child pornography, and places certain obligations on internet service providers to take all reasonable steps to prevent the use of their services for the hosting or distribution, and accessing, of child pornography. Contravention of the FPA may result in civil and/or criminal sanctions. Notices may be issued to social media platforms under the FPA, ordering the removal of prohibited content
Cybercrimes Act 19 of 2020 (Cybercrimes Act)
- The Cybercrimes Act was enacted to create cybercrime offences and to regulate the investigation and prevention of cybercrimes. Offences under the Cybercrime Act include, but are not limited to, the unlawful and intentional interception of data, cyber fraud, forgery, and extortion, the use of data messages to incite or threaten violence or damage to property, and the distribution of private and intimate images (including simulated images, such as AI generated images of a sexual nature).
- Social media platforms may be ordered to remove prohibited content, and should implement systems which prevent the disclosure of prohibited content, and are sufficiently secure to protect its users and their data from potential cybercrimes.
Intellectual property
- The Copyright Act 98 of 1978 (Copyright Act) grants the author of specified works exclusive statutory rights, and provides that copyright infringement will occur where a person, who is not the owner of the copyright and is not licensed by the owner, does, or causes another to do, any act which the owner has the exclusive right to do or authorize.
- Similarly, trade marks of natural and juristic persons are protected under the Trade Marks Act 194 of 1993, and non-compliance with the exclusive rights associated with those trade marks may lead to infringement. To ensure maximum protection, trade marks should be registered with the Companies and Intellectual Property Commission (CIPC). While unregistered trade marks do enjoy some protection under the common law, proving your rights under unregistered trade marks is more difficult, and registered trade marks provide stronger protection.
- Social media platforms may be ordered to remove infringing content.
Data protection laws applicable to social media
Protection of Personal Information Act 4 of 2013 (POPIA)
- The Constitution of the Republic of South Africa, 1996 specifically entrenches the right to privacy, which includes the right to protection against the unlawful collection, retention, dissemination and use of personal information. POPIA was enacted for this purpose and regulates the processing of personal information in South Africa. Although it is very similar to the European Union’s General Data Protection Regulation (GDPR), there are some key differences. Notably, unlike GDPR, POPIA also protects personal information of juristic persons. POPIA provides a framework for the processing and protection of personal information by both public and private bodies in South Africa. It applies where the responsible party, being the party that determines the purpose and means for processing, is domiciled in South Africa, or is not domiciled in South Africa but makes use of automated or nonautomated means to process personal information in South Africa, unless those means are used only to forward personal information through South Africa.
- To the extent that personal information is processed in South Africa on social media platforms, such processing must comply with the provisions of POPIA.
- There are eight conditions for the lawful processing of personal information. These are (1) accountability, (2) processing limitation, (3) purpose specification, (4) further processing limitations, (5) information quality (6) openness, (7) security safeguards, and (8) data subject participation. Summarily, personal information may be collected, stored and otherwise processed for specified, explicit and lawful purposes and not further processed in a manner that is incompatible with those purposes, and further, must be done in a lawful and reasonable manner, which is relevant and not excessive.
- POPIA grants data subjects the right to access their own personal information held by a responsible party, and to have same corrected or deleted at the data subject’s election. A data subject may also withdraw its consent for the responsible party to process its personal information, where such processing is based on consent.
- POPIA prescribes additional safeguards in respect of personal information of children and special personal information, which includes information related to health, sex life, criminal behavior, religious or philosophical beliefs, etc.
- POPIA further provides that direct marketing by means of electronic communication is prohibited unless the data subject has consented or, subject to certain conditions, is a customer of the responsible party. In any event, the data subject must be given the opportunity to object to the processing of their personal information for purposes of direct marketing at the time the information is collected and on every occasion that marketing communications are sent to the data subject. Any such marketing would need to be in accordance with the provisions of the CPA and ECTA (discussed under the Current Laws and Regulations relevant to social media section).
Legislative developments on the horizon
Competition
The Competition Commission is currently engaging in a media and digital platform market inquiry, which report is anticipated to be finalized by January 2025, following which, steps may be taken to remedy, mitigate or prevent any adverse effects on competition. The market inquiry’s focus is on online/digital distribution of media through general search, social media and news aggregation platforms as well as what is also known as “the ad tech stack” which involves the intermediation of advertisers and the selling of advertising space on publisher’s websites. The scope of the inquiry will include general search engines such as Google and Bing; social media platforms such as Meta and X; news aggregation platforms; video sharing platforms such as YouTube and TikTok; demand side platforms and advertising networks such as Google Ads; and ad exchanges such as Google Ad Exchange. It will also examine generative AI such as OpenAI’s ChatGPT and the role it plays in using original news content in its output, and how this may change search products and display and ranking on all online platforms. The primary goal of the market inquiry is to determine whether there are any market features which may impede, restrict, or distort competition and/or undermine the purposes of the Competition Act 89 of 1998 and the public interest.
Cybercrimes Act 19 of 2020 (Cybercrimes Act)
Deliberations on the drafting of regulations in terms of the Cybercrimes Act are currently underway. These regulations will introduce, amongst other things, the procedural requirements in respect of investigation and prosecution of persons charged with committing a cybercrime, regulations in respect of evidence to be supplied to court in connection with a cybercrime, as well as the preservation of data to be used as evidence, and the form and manner in which an application for a protection order made under the Cybercrimes Act is to be dealt with. There is no indication as to when these regulations will be published.
Contributors
Meghan Annandale
Senior Associate, Johannesburg
E: meghanannandale@eversheds-sutherland.co.za T: +27 010 003 1443
Matthew Davis
Trainee Associate, Johannesburg
E: matthewdavis@eversheds-sutherland.co.za T: +27 010 003 1438
© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.
Share this