Cybersecurity, data privacy and AI

Deneys’ cybersecurity, data privacy and AI governance team advises organisations across South Africa and Africa on preventing, responding to and recovering from cyber and data-related incidents under legal privilege. 

We act as experienced incident response lawyers, coordinating forensic investigations, ransomware response, data breach notification and stakeholder communications from the outset. Our team leads complex, multi-jurisdictional incidents involving data theft, business interruption, regulatory exposure and operational disruption, managing engagement with South African and foreign data protection and cybersecurity authorities to deliver defensible outcomes while preserving business continuity. 

We operate as breach coach alongside CIOs, CISOs, security teams, executive leadership and insurers, ensuring early alignment with policy obligations and regulator-ready documentation. Beyond crisis response, we design and implement enforcement-aware privacy and cybersecurity programmes aligned to POPIA, PAIA and financial sector standards, including board-level playbooks, tabletop exercises and third-party risk governance. We also act in regulatory investigations and supervisory proceedings, offering a coordinated pan-African capability for multinationals and international law firms.