Your bank app showed your salary to strangers, and nobody told you. The @InforegulatorSA just fined @FNBSA R1M under POPIA. A misconfigured app setting allowed 696 customers to view the home loan applications of 88 others, including their incomes, addresses, and, in 9 cases, account numbers. What makes it worse is that two customers flagged it in 2022. However, FNB treated each as a one-off, never reported it and didn’t fix it. The Regulator also caught FNB collecting personal data from newspapers and retaining some records indefinitely without a legal basis. Meanwhile, other SA banks drew a line in the sand on AI agents this week. So, / @CapitecBankSA says no third-party AI agents, screen-scrapers allowed / @AbsaSouthAfrica says if you share your login with an AI and lose money, you may be held liable. / FNB says it does not yet allow third-party AI agents to access customer accounts or make transactions; however, they are building a framework for approved AI assistants with a per-action consent / @Discovery_SA says it doesn’t currently allow AI agents into accounts Big ups to @InforegulatorSA. They're really busy. Other relevant regulatory entities really need to catch up and set direction. Otherwise, the private sector, banks in this case, will do as they please. In the EU, they don't play games. For now, the message to fintech founders is clear. Build on consent-based APIs, not shared passwords. Would you let an AI agent transact in your account?