South Africa's Draft National AI Policy: Sector-Specific Governance
South Africa's Draft National AI Policy: A Sector-Specific Governance Model
South Africa is accelerating its journey toward structured artificial intelligence governance, with the Draft National AI Policy now advancing through the critical Cabinet approval stage. This development marks a major progression from broad strategic discussions to actionable regulatory steps, as confirmed during a key briefing to Parliament's Portfolio Committee on Communications and Digital Technologies on 24 February 2026 by the Department of Communications and Digital Technologies (DCDT).
Having successfully cleared the Socio-Economic Impact Assessment System (SEIAS) certification and secured concurrence from all relevant Director-General clusters, the draft policy enjoys strong inter-governmental backing. It is currently navigating Cabinet processes, with expectations that it will be published—gazetted—in the Government Gazette for a 60-day public consultation period starting in March 2026. Final adoption of the policy is targeted for the 2026/2027 financial year, paving the way for sector-specific strategies and implementation measures from 2027/2028 onward.
The government's approach deliberately avoids establishing a centralized, standalone AI regulator—in contrast to models like the EU AI Act. Instead, it embraces a sector-specific, multi-regulator framework that integrates AI oversight into existing bodies such as ICASA (for communications and digital infrastructure), financial regulators, health authorities, and others. This phased, tailored model recognizes that AI risks and applications vary widely across industries like healthcare, finance, telecommunications, and public services.
At the heart of the Draft National AI Policy are five core pillars designed to balance innovation with responsibility and inclusivity:
- Capacity and talent development — Prioritizing national AI skills through education, training, industry partnerships, expanded digital infrastructure (including more compute resources like GPUs), and support for SMEs to foster local innovation and economic participation.
- Responsible AI governance — Introducing safeguards against risks such as data misuse, cybersecurity vulnerabilities, misinformation, deepfakes, and other harms, while enforcing clear accountability.
- Ethical and inclusive AI — Addressing bias mitigation by advocating for training on representative South African datasets to prevent "imported bias" from Global North models, alongside national ethical guidelines and developer accountability for adverse outcomes.
- Cultural preservation and global integration — Leveraging AI to digitize and protect indigenous languages (with specific mention of Khoi and San languages) and traditional knowledge systems, while bolstering international collaboration to keep South Africa competitive.
- Human-centred deployment — Rejecting opaque "black box" systems in high-impact areas and insisting on human oversight, explainability, and organizational responsibility for AI-driven decisions—even in automated contexts.
The policy positions AI as a driver of inclusive economic growth, job creation, improved public services, and global competitiveness, while emphasizing equitable distribution of benefits and risks across society and generations. It responds to concerns about concentrated AI power and aims to empower local talent, protect privacy and security, and align technological advancement with South African values.
With public consultation imminent, organizations, businesses, civil society, and citizens are urged to prepare: monitor the gazetting notice, engage actively during the 60-day comment window to shape sector-specific rules, and conduct internal audits of current AI systems. This includes mapping high-impact deployments, reviewing data practices, assessing explainability, ensuring compliance with laws like POPIA (Protection of Personal Information Act), and aligning with governance standards such as King V.
South Africa's measured, context-sensitive path reflects lessons from global peers like the UK and India—prioritizing embedded oversight over heavy new bureaucracy—while addressing unique local priorities like cultural heritage, bias in diverse demographics, and bridging digital divides. As 2026 unfolds, this evolving framework could position the country as a thoughtful leader in Africa's AI landscape, turning potential risks into opportunities for sustainable, people-first innovation.
Three Courses. One Complete AI GRC Education.
Take all three courses together for $600. You will learn how to govern AI, how to build with it, and how to certify your organisation's AI management system to ISO/IEC 42001. Delivered online, with reading material, live classes, assessed assignments and a certificate on completion.
The Complete AI GRC Programme
A single, integrated programme that takes you from AI fundamentals to governance, product building and certification readiness. You will complete three full courses, submit assessed assignments, and receive a certificate once you have passed and completed the programme.
- Course 1: AI Governance & Ethics Academy
- Course 2: Building AI-Powered Products
- Course 3: AI Management System Certification (ISO/IEC 42001)
- All three AI GRC courses in one bundle
- Complete reading material for every course
- Live online classes
- Assessed assignments
- Certificate upon passing and completing the programme
- Google translator for reading material enabled
- Email support throughout your studies
AI Governance & Ethics Academy
The foundation course. Understand how AI is regulated, how to assess AI risk, and how to build governance that people actually follow.
1 month · 4 live classes · 1 assignment · Certificate of completion
- AI governance and ethics fundamentals
- Enterprise AI governance and ISO 42001 implementation
- Global legal frameworks, AI safety, and risk management
- AI ethics in healthcare, media, labor, and smart cities
- Inclusive governance and policy design for developing nations
Building AI-Powered Products
The builder's course. Learn how to take an AI idea from concept to a responsibly shipped product — with the right architecture, evaluation and safeguards.
1 month · 4 live classes · 1 assignment · Certificate of completion
- Role and daily rhythm of AI product managers
- AI product development lifecycle from vision to market
- Essential competencies and strategic thinking (build-or-buy, innovator's dilemma)
- Setting goals, measuring success, and AI-powered tools
- Building AI agents and autonomous product experiences
AI Management System Certification According to ISO/IEC 42001
The certification course. Build and implement an AI Management System (AIMS) aligned to the ISO/IEC 42001 standard and prepare your organisation for independent certification.
1 month · 4 live classes · 1 assignment · Certificate of completion
- AI as a transformational technology and the generative revolution
- The intelligent economy and preparing your organization for AI
- Context, leadership, and risk planning for your AIMS
- Support infrastructure, operational control, and the AI project life cycle
- Measuring, auditing, and continuous improvement of your AIMS
Bundle Offer — All Three Courses for $600
The three courses are designed to be taken together: governance gives you the rules, product building gives you the practice, and ISO/IEC 42001 gives you the system that proves it. All three together cost $600. To enrol, complete the enrolment form or email infoforyoustudy@gmail.com and we will confirm your place and send payment details.
Who Should Study GRC? The Professions That Benefit
GRC is not only for compliance officers. It is a portable skill set that makes almost any professional more valuable, because every industry now has to manage risk, follow rules and prove it did so. Below are the professions that benefit most — and why.
Lawyers & Legal Professionals
GRC is now part of everyday legal practice. Lawyers advise on AI regulation, data protection, contracts and vendor terms, and defend clients in regulatory investigations. Understanding governance frameworks and risk assessment turns legal advice into something the business can actually implement.
Compliance Officers & Regulatory Affairs
Compliance teams are being asked to build policies, map obligations to controls, run monitoring and report to regulators. GRC study turns a list of rules into an operating system that the rest of the organisation can follow.
Risk Managers
Risk professionals already own enterprise, operational and third-party risk. GRC training extends those skills into model risk, AI risk, algorithmic bias and technology risk — the fastest-growing categories on most risk registers today.
Internal Auditors & Assurance Professionals
Auditors must test whether controls actually work. GRC gives you the frameworks — COSO, ISO 31000, ISO/IEC 42001 — and the evidence standards to audit AI, data and cyber controls with confidence, and to report findings the board will act on.
Accountants, Finance & Actuarial Professionals
Financial reporting, internal control, ESG disclosure and assurance all intersect with governance and risk. GRC knowledge supports internal controls over reporting, fraud risk, third-party assurance and the emerging market for AI assurance work.
Executives, Board Directors & Company Secretaries
Boards are personally accountable for oversight, risk appetite and regulatory compliance — including AI. A working knowledge of GRC lets directors ask sharper questions, challenge management and document defensible decisions.
Doctors, Nurses & Healthcare Leaders
Clinical governance is GRC under another name. Healthcare professionals using AI triage, diagnostics, imaging or records tools need to assess risk, protect patient data and meet safety, quality and regulatory obligations.
HR & People Professionals
Recruitment algorithms, employee monitoring, pay-gap analytics and workforce AI all raise fairness, privacy and legal risk. HR teams with GRC skills design people processes that survive scrutiny — and can explain them when challenged.
IT, Cyber Security & Data Professionals
Security and data teams already practise risk management. GRC study connects technical controls to legal obligations, audit evidence and board reporting — and is one of the fastest routes into a CISO, data governance or AI governance role.
Product Managers, Engineers & Data Scientists
Building AI responsibly means documenting decisions, testing for bias and knowing which rules apply. GRC literacy shortens review cycles, reduces rework and keeps products shippable instead of stuck in legal review.
Consultants, Advisors & Trainers
GRC is a growing advisory market. Consultants who can implement governance frameworks, run risk assessments or prepare clients for ISO/IEC 42001 certification are in demand across every sector, in every region.
Policy Makers, Regulators & Public Sector
Regulators must write and enforce rules for technologies that change monthly. GRC study builds a practical understanding of how organisations actually implement, evidence and fail at compliance — which is exactly what good regulation requires.
And Many More
GRC also benefits procurement and supply chain managers running vendor due diligence, journalists and researchers who need to read governance documents and audit reports critically, educators and academics, insurance and banking professionals assessing risk, NGO and humanitarian staff accountable to donors, founders and SME owners who must comply without a large compliance team, and students or career changers looking for a portable, in-demand skill.
If your work involves making decisions, spending money, handling people's data, or answering to anyone — a regulator, a client, a board, a donor or the public — GRC is relevant to you.
And in 2026, Every One of These Professions Needs AI GRC
AI is now in the tools these professionals use every day. That is why our three courses are built on GRC foundations: Course 1 gives you AI governance and ethics, Course 2 shows you how AI products are built responsibly, and Course 3 shows you how to certify an AI management system to ISO/IEC 42001.
All three together cost $600. Complete the enrolment form or email infoforyoustudy@gmail.com to enrol or ask a question.
An AI School Built for the Age of AI Accountability
Study AI GRC exists because AI moved faster than the people expected to govern it. Boards
are being asked to sign off on AI. Regulators are asking for evidence. Clients are asking
who is accountable when a model gets it wrong.
We teach the three things that answer those questions: how to govern AI,
how to build with it responsibly, and how to certify your AI
management system to ISO/IEC 42001. And we teach them the way GRC professionals
actually work — with policies, risk registers, controls and evidence.
“AI governance is not about slowing AI down. It is about being able to explain, defend and trust what you have built.”
What We Stand For
- Practicality. Every course ends with something you can use — a policy, a risk assessment, an architecture, an audit plan.
- Accessibility. No coding or legal background required. AI governance belongs to everyone who touches AI.
- Integrity. We teach responsible AI, and we practise it.
- Standards. Our teaching is anchored to recognised frameworks: ISO/IEC 42001, the NIST AI RMF and the EU AI Act.
Frequently Asked
What does GRC stand for?
GRC stands for Governance, Risk and Compliance. Governance is how decisions are made and who is accountable for them. Risk is what could go wrong, how likely it is and how severe the impact would be. Compliance is proving — with evidence — that the organisation followed the laws, regulations, standards and commitments that apply to it. Together they form the system an organisation uses to run itself responsibly.
Why is GRC important?
GRC keeps an organisation lawful, protects its reputation and makes decisions defensible. It reduces the risk of fines, lawsuits, data breaches and failed audits, and it turns good intentions into documented, testable controls. Regulators, investors, insurers, clients and boards increasingly expect to see it — and with AI now in the mix, the stakes are higher than ever.
Which professions benefit from studying GRC?
Far more than people expect. Lawyers and legal professionals, compliance officers, risk managers, internal auditors, accountants and finance professionals, executives and board directors, company secretaries, doctors and healthcare leaders, HR professionals, IT and cyber security professionals, data scientists and engineers, product managers, consultants, procurement and supply chain managers, policy makers and regulators, journalists and researchers, founders and SME owners, and students or career changers. If your work involves decisions, money, data or accountability, GRC is relevant to you.
What exactly is Study AI GRC?
Study AI GRC is an AI school. We teach AI governance and ethics, how to build AI-powered products, and how to implement and certify an AI management system to ISO/IEC 42001 — all grounded in the fundamentals of GRC.
How much do the three AI courses cost?
All three courses together cost $600. That covers the AI Governance & Ethics Academy, Building AI-Powered Products, and AI Management System Certification according to ISO/IEC 42001. Full details are on the academy card above.
Who are the courses designed for?
The AI Governance & Ethics Academy and the ISO/IEC 42001 course are built for professionals — legal, compliance, risk, audit, HR, product and management. Building AI-Powered Products is practical and beginner-friendly. No prior background in coding, law or machine learning is required for any of them.
What is ISO/IEC 42001 and why does it matter?
ISO/IEC 42001 is the international standard for AI management systems (AIMS). It gives organisations a structured way to govern AI responsibly, manage AI risk, demonstrate accountability to regulators and clients, and prepare for independent certification. Our third course walks you through implementing it step by step.
How long does the programme take?
The three courses are delivered online with live classes and recorded sessions. You work through the material at your own pace within the cohort schedule, submitting assessed assignments as you go, and receive a certificate once you have passed and completed the programme.
Where do I enrol?
Complete the enrolment form with the bundle you want, and we will confirm your place, send payment details and give you access to the course materials. You can also email infoforyoustudy@gmail.com, or use the Enrol button at the top of the page.
Is everything online?
Yes. All courses are delivered online, with live classes, downloadable reading material and email support throughout.