Giftwrap Trading (Pty) Ltd v Vodacom (Pty) Ltd and Others

Giftwrap Trading (Pty) Ltd conducted online sales through internet advertising on Google platforms. For several years, it was victimised by 'click fraud', whereby its advertisements were repeatedly clicked to increase advertising costs and drain sales revenue. In March 2019, with the assistance of experts, Giftwrap obtained a large number of local Internet Protocol (IP) addresses of devices from which it believed the click fraud emanated, and identified the service provider for each IP address. In June 2019, Giftwrap launched an application in the Gauteng Division of the High Court seeking disclosure of customer information from the respondents (Vodacom and other cellular phone and Internet service providers) in respect of the listed IP addresses, to identify wrongdoers and take legal action against them. Giftwrap initially relied on Nampak Glass (Pty) Ltd v Vodacom (Pty) Ltd & Others and later on section 42(1)(c) of the Regulation of Interception of Communications and Provision of Communication-Related Information Act 70 of 2002 (RICA). The service providers other than Vodacom abided the outcome. Vodacom did not dispute the facts but argued that RICA precluded the disclosure sought.

• Whether section 42(1)(c) of RICA permits disclosure of customer information obtained and stored by service providers under sections 39 and 40 of RICA for purposes of identifying wrongdoers with a view to instituting legal proceedings
• Whether the decision in Nampak Glass (Pty) Ltd v Vodacom (Pty) Ltd & Others was correctly decided in light of RICA's provisions
• The proper interpretation of section 42(1)(c) of RICA regarding when customer information is 'required as evidence in any court of law'
• Whether legislative oversight in failing to update terminology in RICA following amendments should be rectified through statutory interpretation

1. The appeal is dismissed. 2. The registrar of the Court is directed to bring this judgment to the attention of the Cabinet members responsible for the administration of justice and state security.

Section 42(1)(c) of RICA permits disclosure of customer information obtained and stored by service providers under sections 39 and 40 of RICA only when such information is required as evidence in court proceedings that are already pending, not for purposes of investigating potential claims or identifying wrongdoers with a view to instituting future legal proceedings. The text, context and purpose of section 42(1)(c) support this interpretation: the phrase 'required...as evidence in any court of law' indicates that information must be required for pending proceedings; the contrast with section 42(1)(d), which expressly permits disclosure for 'investigation with a view to institution' of certain proceedings, confirms that investigative purposes are excluded from section 42(1)(c); and this limited scope accords with RICA's purpose of protecting private information except where disclosure is justified in the public interest. Where terminology in legislation has been amended in definitions but not updated in the body of the Act due to legislative oversight, and the intention to update throughout is clear, courts may interpret the outdated expressions as referring to the new definitions to give effect to legislative intent.

The Court observed that Nampak Glass (Pty) Ltd v Vodacom (Pty) Ltd & Others was wrongly decided to the extent it developed the common law to permit disclosure of customer information without consideration of RICA's provisions, which precluded such disclosure. The Court stated that common law development in this area could not legitimately be undertaken without consideration of RICA. The Court also noted (without making a final determination) that it appeared the bulk of call logs sought in Nampak likely constituted archived communication-related information, disclosure of which is strictly regulated by Part 2 of Chapter 2 of RICA. The Court commented that persons in Giftwrap's position are not without remedies: RICA does not preclude preservation of customer information pending institution of legal proceedings in which it would be required as evidence; alternatively, a criminal complaint could be laid and customer information obtained under section 205 of the Criminal Procedure Act 51 of 1977 or section 42(1)(d) of RICA. The Court expressed the view that the legislature should correct with expedition the oversight whereby 'telecommunication' expressions in RICA's operative provisions were not updated to 'electronic communication' expressions following definitional amendments, and directed that the judgment be brought to the attention of the relevant Cabinet members for this purpose.

This case establishes important principles regarding access to customer information held by telecommunications and Internet service providers under RICA. It clarifies that section 42(1)(c) of RICA permits disclosure of customer information only when it is required as evidence in pending court proceedings, not for purposes of investigating potential wrongdoing or identifying potential defendants. The judgment provides critical guidance on the balance between privacy rights and access to information for litigation purposes. It also corrects the approach in Nampak, which had developed the common law to permit broad pre-litigation disclosure without considering RICA's statutory framework. The decision reinforces that RICA creates a comprehensive statutory scheme for disclosure of customer information that cannot be bypassed through common law development. The judgment also demonstrates the Court's willingness to address legislative oversights through interpretive techniques while calling for proper legislative correction. This case is significant for understanding the limitations on pre-litigation discovery in the digital age and the protective scope of telecommunications privacy legislation.