South Africa AI Regulations Delayed Until 2027
South Africa’s artificial intelligence (AI) rules won’t land until 2027, leaving a gap where millions of citizens share private information with machines without any official oversight. The draft national AI policy, which was supposed to provide a framework for this technology, was withdrawn in April after the document meant to govern AI was discovered to have been written using AI itself. A seven-member expert panel is currently rebuilding the policy, with a report expected in August, a revised draft reaching cabinet in November, and public consultation unlikely to reopen before January 2027. This delay creates a significant window of more than a year where AI systems can answer calls, approve applications, and handle personal data with no national framework in place.
Related: Lael Bethlehem launches agency to boost local infrastructure
Waiting is not the only option for those organisations that want to operate responsibly. The alternative is to govern themselves against standards that already exist and are recognised globally. ISO/IEC 42001, introduced at the end of 2023, serves this purpose. It is the first international standard built specifically for the management of AI, offering a structured, audited set of policies and controls covering how a system is designed, deployed, monitored and corrected when it drifts. While it does not replace the law South Africa is still writing, it allows an organisation to prove to a customer, a board, or a regulator that its AI is run deliberately rather than left to improvise.
It is easy to score political points off the AI-written policy document, but the real lesson is what happens when a powerful tool is put to work and nobody checks its output. The same failure can occur in a contact centre, a loan department or a clinic, and it is the person on the other end who carries the cost. The government has signalled that it will fold AI into existing regulators rather than build a single new one, an instinct that seems sound because heavy, hurried rules tend to freeze the investment and experimentation a developing economy needs.
Related: US Probe Could Raise Tariffs on Vietnam Exports
The sectors where AI has the most to offer in South Africa — banking, insurance, health care, public services — are precisely the ones that cannot afford to put an unaccountable system in front of a customer. A bank will not surrender its most sensitive interactions to a black box it cannot inspect. Certification is what converts “trust us” into something a compliance officer can actually verify, and that verification is what allows AI into those settings at all. Done properly, governance is what makes ambitious adoption possible in the first place. The author, CEO of 1Stream, notes that the company has just taken that certification and is still searching for others in their field on the continent who have done the same.
