Applying AI at Work - lesson 3
What you can and cannot put into the box
Data protection law in Africa is real, enforced, and mostly ignored by enthusiastic AI users.
What you will take away:
- Pasting customer data into a consumer AI tool can be an unlawful transfer, not merely a bad habit.
- Nigeria NDPA 2023, Kenya Data Protection Act 2019 and South Africa POPIA all impose real obligations with real penalties.
- Classify data into three tiers and set one rule per tier. Simple rules get followed.
- Anonymise, aggregate or synthesise before you paste. Most tasks do not need real identifiers at all.