Who Controls South Africa's Citizen Data: Banks, Government, and Your Rights

Data governance, not ballot boxes, may be where South Africa’s next democratic contest is quietly being decided.

The country’s poorest citizens face a consequential shift in how the state delivers core identity services, and with it, who controls the data that shapes public understanding of their own lives. The Department of Home Affairs has begun routing Smart ID applications through bank branches, with Capitec leading the rollout across more than 240 locations nationally. The government aims to expand this to 1,000 branches by 2029. Smart ID delivery is not a peripheral administrative convenience. It is the mechanism through which citizens establish and verify their identity, which in turn underpins access to rights, services and economic participation.

The arrangement raises urgent questions about who benefits when public functions move into private institutions with significant political connections. Capitec founder Michiel le Roux has channelled more than R208 million in donations to the Democratic Alliance over the past five years through entities including Fynbos Kapitaal, Fynbos Ekwiteit and Fynbos Trust, according to political-funding disclosures. The pattern mirrors what the Zondo Commission identified as state capture: networks operating inside and outside the state where political influence and economic interests intersect.

The mechanism, though, differs from earlier eras. Rather than seeking influence through strategic board appointments and corrupt procurement, contemporary capture can operate through lawful outsourcing arrangements, disclosed political donations and digital partnerships. A major funder does not need to occupy a ministry. Policy choices about where public functions are delivered can create proximity to the political system and determine who gains privileged access to strategic infrastructure.

What makes this moment particularly significant is the strategic asset at stake. Where the previous era of state capture centred on control of state-owned enterprises, the current frontier is data governance itself. Data mining and data governance are among the world’s fastest-growing strategic areas, yet South Africa’s government arrived late to building institutional capacity to govern this space independently. Into that gap steps private capital, particularly financial capital. Banks already sit on some of the richest and most granular behavioural datasets available: every transaction, income stream and pattern of spending and saving generated simply by living an economic life.

The concern is not simply the funding relationship but what it could foreclose. Data governance ought to remain open to young entrepreneurs, smaller fintechs and public-interest technologists building tools for spatial planning, service delivery and support for the informal economy. Instead, the largest, best-funded and most politically connected players may be gaining privileged positions in state-linked digital infrastructure before the industry has had meaningful opportunity to be contested or democratised. This is monopolisation presented as efficiency.

The resource at stake is not the population register itself, which remains a state asset. The concern is growing concentration of access, infrastructure and opportunity around the systems through which South Africans establish and verify their identity. Who controls those access points can shape who participates in the data economy that develops around them.

This interpretive power became visible in a separate but related dispute between Capitec and Statistics South Africa over unemployment measurement. Capitec CEO Gerrie Fourie argued, based on patterns of informal economic activity observed through Capitec accounts, that actual unemployment may be closer to 10 percent than the 32.9 percent reported by Stats SA for the first quarter of 2025. Statistician-General Risenga Maluleke rejected the suggestion that the institution manipulates its figures and noted that Stats SA’s Quarterly Labour Force Survey already includes informal and self-employed workers in line with International Labour Organisation standards.

This is not merely a methodological disagreement. Reframing informal, precarious economic survival as employment is an ideological move. It can become a redefinition that reduces the perceived scale of crisis and, with it, the political pressure to expand social security, infrastructure and protection for millions of South Africans who rely on government support. People who generate income through informal activity are not necessarily inside a safety net. They may remain outside the protections associated with stable formal employment and functioning social security. Calling that activity employment does not close that gap. It can obscure it.

Meanwhile, the institution making public arguments about how informal economic activity should be understood is also participating in a growing ecosystem through which the state’s identity services operate. There is no evidence that the two are coordinated. But together they raise a broader question about interpretive power. When a major financial institution has access to large-scale economic data while occupying an expanding role in state-linked digital infrastructure, its ability to shape public debates about how citizens are measured, classified and understood becomes increasingly significant.

Democracy is not decided only at the ballot box. Increasingly, it is also decided in the infrastructure of data: who collects it, who controls the systems through which it moves, who has access to it and who gets to say what it means. If that infrastructure consolidates quietly among institutions with deep economic and political connections, then the truth South Africans are offered about their own society risks becoming a truth increasingly authored by capital rather than by the people it is meant to describe.

The task ahead is therefore not simply to contest another election cycle. It is to insist that data governance, like land and the airwaves, remains a contested and democratised space. South Africa cannot afford another generation of weakened institutions. The poor are already left to scramble for the remnants of institutions damaged by the last era of state capture. Whether the country’s emerging data infrastructure will be governed in the public interest, or quietly absorbed into the same networks of political and economic proximity, remains an open question with consequences that will outlast any single administration.