Your Identity for Sale? LFN Challenges South Africa’s Hidden Data Regime

Excerpt: For years, South Africans were told that our population-register information was protected by law. But after deeply analysing the current Identification Act and Regulations, LFN has uncovered what may be a massive constitutional defect hidden within the existing system itself. The shocking revelation? Long before Digital IDs even become fully operational, the current legal framework already appears to allow real-time and batch access to population-register information by various entities, without constitutionally adequate safeguards ever properly being prescribed.

This raises a terrifying question: Has our private information already been circulating for years without the public truly understanding the extent of it?

LFN has now formally placed the Minister of Home Affairs on terms to address this constitutional dilemma within 30 days, failing which constitutional proceedings may follow in the High Court. The implications could be enormous, potentially opening the door to some of the largest privacy and dignity claims South Africa has ever seen.

The full letter addressed to the Minister of Home Affairs can be found under this article.

If you like our work, why not consider a donation or gift of your choice?

or make a quick donation… MobiPaid

When Liberty Fighters Network (“LFN”) first raised concerns about the proposed rollout of Digital IDs in South Africa, many people assumed that the real danger still lay somewhere in the future.

The concern was simple enough: once Digital IDs become linked to biometric systems, facial recognition, verification APIs, banks, insurers, mobile operators, and centralised databases, what would stop personal information from being abused, leaked, traded, profiled, or weaponised?

But after conducting a deeper legal analysis into the current Identification Act and the existing Identification Regulations already in force, LFN has uncovered something far more disturbing.

The problem may not be starting tomorrow.

The problem may already exist today.

And most South Africans may never even have realised it.

For years, many of us assumed that the information held by the Department of Home Affairs was heavily protected by law. After all, your identity number, fingerprints, residential details, marital information, citizenship status, photographs and civic records are amongst the most sensitive information the State can possibly hold about you.

Naturally, most people believed that this information could only be accessed under extremely strict legal conditions.

But then came the discovery that changed everything.

Buried within the current Identification Regulations, 1998, is a provision allowing information from the population register to be furnished in real-time and batch format to “any person, organisation, body, society or institution”, against payment of prescribed fees.

Read that again carefully.

Not merely organs of state.

Not only law enforcement.

Not only the courts.

But potentially “any person, organisation, body, society or institution”.

Even more concerning is the fact that the regulations appear to prescribe fees for access to population-register information, without properly prescribing the constitutional safeguards, limitations, oversight structures and procedural protections that should accompany access to information of this magnitude.

This changes the entire conversation around Digital IDs.

Suddenly, the question is no longer only:
“What happens when Digital IDs are rolled out?”

The real question becomes:
“How much of our information has already been circulating for years under an incomplete and constitutionally defective framework?”

And that question should concern every single person in South Africa.

LFN has now formally placed the Minister of Home Affairs on terms to address what appears to be a potentially serious constitutional defect within the Identification Act and the Identification Regulations themselves.

The concern is profound.

The Identification Act appears to create confidentiality protections over population-register information in one section, while another section creates broad exceptions allowing the furnishing of such information to various entities, subject to safeguards that were supposed to be prescribed through regulations.

But here lies the potential constitutional crisis:
those safeguards either appear absent, incomplete, or grossly inadequate for a modern digital and biometric age.

In other words, South Africans may have been told:
“Your information is protected”,
while the legal machinery allowing access to that information was never properly constitutionally regulated in the first place.

This is not merely a technical legal issue.

This cuts directly into constitutional rights involving:
• privacy;
• dignity;
• bodily integrity;
• lawful administrative action;
• informational autonomy;
• freedom from unlawful profiling and surveillance.

And now, with the proposed rollout of Digital IDs, APIs, trusted entities, biometric verification systems and real-time data-sharing frameworks, the danger may increase exponentially if these underlying constitutional defects are not first addressed.

Think about it carefully.

If the legal framework already allowed broad access to population-register information before Digital IDs even became operational, what happens once:
• facial recognition;
• biometric matching;
• real-time verification;
• QR-linked identities;
• private-sector enrolment points;
• digital wallets;
• automated authentication systems;
become integrated into the system?

The frightening reality is that nobody outside government truly knows:
• who has had access to population-register information;
• how much information has already circulated;
• how long such information has been retained;
• whether information has been cross-linked with other databases;
• whether profiling has already occurred;
• whether personal information was further distributed;
• whether biometric information has already been queried or verified;
• whether adequate safeguards ever existed at all.

And if proper constitutional safeguards were not in place, South Africa may eventually face one of the largest privacy and dignity class-action landscapes the country has ever seen.

Because privacy is not merely about secrecy.

Privacy is about control.

It is about knowing who has your information.

It is about knowing why they have it.

It is about knowing what they are doing with it.

And it is about ensuring that neither the State nor private actors quietly build systems capable of turning citizens into permanently monitored data subjects.

LFN is not opposing technology itself.

Technology can benefit society when it remains voluntary, transparent, decentralised where possible, constitutionally compliant and subject to strict oversight.

But no constitutional democracy should tolerate a situation where deeply personal identity information may potentially circulate through systems that were never lawfully and constitutionally safeguarded in the first place.

The stakes are now much bigger than Digital IDs alone.

This has become a question about whether South Africans unknowingly surrendered control over their identity information years ago — without proper constitutional protection, without proper oversight, and without truly informed public participation.

LFN has given the Minister of Home Affairs 30 days to address these concerns, failing which constitutional proceedings may follow in the High Court.

This battle is no longer only about the future.

It may be about exposing what has already happened behind the scenes for years.

If you like our work, why not consider a donation or gift of your choice?

or make a quick donation… MobiPaid

The Letter Sent To the Minister of Home Affairs on 28 May 2026…