POPIA enforcement is becoming more assertive, with the Information Regulator increasingly moving beyond guidance and enforcement notices. In this roundup, we look at recent enforcement actions, what they signal for compliance, and what organisations can learn from them. We also look at recent EU developments, including changes to the AI Act and proposed updates to the GDPR and ePrivacy rules, which may affect South African organisations processing the personal data of people in the EU.