Security estates could face strict new rules on ID scans and facial recognition Kabous Le Roux 13 May 2026 | 4:19Security estates and office parks may soon face strict new rules on ID scans, facial recognition and visitor data in South Africa. Security estates and office parks across South Africa could soon face stricter rules on how they collect, store and protect visitor information, including ID scans and facial recognition data. (gyn9037/123rf.com) Millions of South Africans who hand over IDs, scan driver’s licences or use facial recognition systems at security estates and office parks could soon be affected by major new privacy rules. The Information Regulator has published a draft code of conduct aimed at gated access areas, including residential estates, business parks and office complexes. The proposed rules focus on how security-controlled sites collect visitor information, how long they keep it, who can access it and how it is protected from data breaches. Regulator signals tighter controls Speaking on 702, Werksmans Attorneys data privacy specialist Ahmore Burger-Smidt said the regulator was effectively warning security estates and office parks to prepare for stricter oversight. “The regulator is saying, wake up, realise what I intend to do,” Burger-Smidt said. She said the draft code was not yet law, but stakeholders were being asked to study it and submit comments before formal rules were introduced. The draft code applies to places where visitors routinely hand over IDs, driver’s licences, vehicle registration details or biometric information before entering. Questions over visitor data storage The discussion comes as many South Africans increasingly rely on gated communities and controlled-access buildings for safety and security. But concerns are growing over what happens to personal information after visitors enter security estates and office parks Burger-Smidt highlighted risks linked to old-style visitor books, digital ID scans and number