After market close · Johannesburg
A financial journalist has just quoted a listed-company CEO’s medical report back to her board. It started at 11:55 SAST with an insurance broker, an 18-page claim, and five minutes to spare before a noon call.
A broker needs three talking points before her noon client call. One upload to a personal cloud AI account will give her time back. She attaches the full 18-page claim and dictates a voice note quoting one line: “Extended medical leave advised.”
11:55 SAST · Five minutes before the noon callThe CEO entrusted the company with a confidential medical report. If an unauthorised overseas cloud transfer breaches POPIA, the affected person can bring a civil action—separate from regulatory penalties.
HYPOTHETICAL CIVIL & STATUTORY EXPOSUREA court decides what award is just and equitable.
Statutory maximum fine for a qualifying offence.
Under Section 8, the responsible party remains accountable even when an employee uses a personal AI shortcut. One paragraph was needed; an entire lifetime medical history left the building.
To share the file quickly, the source report was set to “Anyone with the link”. An outside reader saved a PDF and forwarded it. By afternoon trade, a journalist asks the board to confirm the CEO’s leave—and shares slide from R100.00 to R78.00.
PRESS ENQUIRY · “Can you confirm the CEO is taking leave?”The CEO calls back: “My family found out from the news. Who else has my report?” The public link is still live. Try revoking it below—and see why closing a cloud link cannot recall an already-downloaded PDF.
↺ ALTERNATIVE WORKFLOW · SAME CLAIM · REWIND TO FIVE MINUTES BEFORE NOON
Back at the same desk at 11:55, the broker opens the restricted company workspace, highlights only the Page 7 work-capacity paragraph, and dictates her question. The local model prepares three concise points—and flags what the extract does not state.
✓ Broker verification gate: 3 of 3 talking points checked against Page 7
Document OCR, voice-note transcription, and LLM inference run on dedicated company hardware in South Africa. Prompts, working caches, audit logs, and backups stay inside your controlled boundary—eliminating foreign cloud transfers on local steps.
Test the exact same Case 018 URL as three different people. Both the source medical report and its three-point draft enforce company sign-in and case assignment—and every attempt is recorded live in Chapter 09’s audit log.
Now the company can give a verifiable answer for this workspace. The session ledger records who opened, exported, or was blocked on Case 018—while keeping confidential medical text out of the operational log.
| Time | Reader | Case | Decision / Action |
|---|---|---|---|
| 11:58:19 | Outside link request | 018 | Blocked · no sign-in |
| 11:57:42 | Unassigned colleague | 018 | Blocked · unassigned |
| 11:56:08 | Assigned broker | 018 | Checked 3 talking points |
| 11:55:24 | Assigned broker | 018 | Selected Page 7 extract |
Zero medical text is written into audit rows; clinical content stays inside Case 018.
At 12:00 noon, the broker takes the CEO’s call with three source-checked talking points. The medical report never left the company’s South African boundary, public links are disabled by design, and IT can prove every access event.
The client is the chief executive of a fictional listed company. With five minutes to review an 18-page claim, a broker uses a personal cloud AI account. She sends the report and a voice note quoting the line “Extended medical leave advised.” The provider transcribes the note. The external workspace is restricted at this stage.
If the company transfers the file unlawfully to a provider abroad, the client could seek damages under POPIA sections 73 and 99. A court decides the amount. Section 109 separately allows an administrative fine of up to R10 million for a qualifying offence.
Section 8 makes the responsible party accountable. Sections 10, 26 and 32 matter when a whole medical history is processed for one injury. Sections 19–21 cover safeguards and a written contract for the operator. Section 72 requires a qualifying basis for a transfer to a third party abroad. A personal account can bypass the company’s agreed terms and leave it unable to show what authorised the transfer.
The broker enables “Anyone with the link” on the source report. An outside reader saves a PDF and forwards it. A journalist quotes “Extended medical leave advised.” The board is asked to confirm the CEO’s condition. In the fictional trading session, investors sell and the price moves from R100 to R78, a 22% fall.
The original public link still opens after the broker’s call. Revoking it stops new access through that link. An outside recipient can still read and forward the independent PDF they saved earlier.
Rewind to 11:55 for an alternative run with the same fictional case. The broker selects one relevant paragraph in the company workspace. The draft records that extended leave is advised, that the extract supplies no return date, and a suggested question about a follow-up call. The broker checks each against the source.
In the proposed South African deployment, document reading, voice transcription and inference run on-site. Check where prompts, temporary working files, telemetry, logs, backups and support access actually go. Local hosting still requires a lawful purpose and effective safeguards.
Public sharing is disabled. Company sign-in and case-level access protect both the source and the summary. The assigned broker opens the case. A signed-in employee assigned elsewhere is denied. An outside reader is prompted to sign in.
An authorised reviewer can examine the user, case identifier, action and time. This simulated workspace logs case access decisions and exports without storing medical text in the audit record. The audit covers events inside this workspace.
At noon the broker takes the call with reviewed talking points. She can answer who accessed the restricted case. A private demonstration should test the draft against its source, verify the full data route and try the same link as three users.
Fictional Case 018 illustrates how an unapproved personal cloud account and a public sharing link can expose special personal information abroad under POPIA sections 8, 10, 19–21, 26, 32, 72, 99 and 109 (where qualifying offences carry an administrative fine of up to R10 million, separate from civil damages).
Rewinding to 11:55 shows the proposed on-site South African X-AI workflow: selecting only the relevant extract, verifying three talking points against the source, enforcing company sign-in and case assignment, and recording access events without storing medical text in the operational audit log.