Tayyibah Suliman

Sector Head, Director

Tayyibah Suliman is a Director in our Corporate & Commercial practice and is Head of the Technology & Communications sector.

 

Tayyibah Suliman

About Tayyibah

Tayyibah is a seasoned legal practitioner with 15 years of experience, managing complex technology, media, telecommunications, data protection, mergers and acquisitions matters for clients across multiple jurisdictions. She has engaged extensively with legal regulatory authorities across Africa and provided strategic public policy, compliance and risk advice to clients with an emphasis on providing strategic and pragmatic solutions.

Tayyibah joined CDH as a Candidate Attorney in January 2008, moving through the ranks to her appointment as Partner in April 2016. She subsequently supported Vodacom Group entities in various capacities since 2017 as a Consulting Legal Executive, including heading up the legal, regulatory, risk and compliance portfolio for Vodacom Business Africa since October 2019 and deputising for the Chief of Legal in Safaricom Ethiopia in 2022. In the course of 2019, she also fulfilled a commercial executive role for a UK start-up legal-tech insurance company, Nuvalaw UK Limited. She returned to CDH as a Sector Head for Technology & Communications.

Areas of expertise

Experience

  • Advising and supporting Vodacom Financial Services on the implementation of financial services products and platforms, including MPESA and Vodapay.

  • Advising and supporting Vodacom and its various subsidiaries on the implementation of renewable energy projects and associated financial service platforms.

  • Maintaining regulatory, compliance and public policy oversight across more than 47 territories.

  • Supporting and advising clients on the implementation of digital media platforms, advertising and the procurement of content.

  • Advising on multiple outsourcing and technology engagements for major banks in South Africa and the UK. 

  • Managing the implementation of legal technology in the insurance industry for online mediation and arbitration

  • Advising on the negotiation and conclusion of large-scale telecommunications infrastructure arrangements for Safaricom Ethiopia.

Credentials

Education

  • Registered with the Legal Practice Council
  • LLB, University of Johannesburg
  • BCom, University of Johannesburg
  • Oxford University Säid Business School Executive Leadership Programme

LANGUAGES

  • English

News

An overview of the Artificial Intelligence in the South African Financial Sector report
Corporate & Commercial Law

An overview of the Artificial Intelligence in the South African Financial Sector report

On 24 November 2025, the South African Reserve Bank Prudential Authority (PA) and the Financial Sector Conduct Authority (FSCA) released a joint report on Artificial Intelligence (AI)...

Recent privacy updates in South Africa and abroad
Corporate & Commercial Law

Recent privacy updates in South Africa and abroad

South Africa is experiencing a sharp increase in reported data breaches. The Information Regulator (Regulator) noted 2,374 breaches in the 2024/25 financial year, an average of 198...

Draft Regulations relating to the processing of data subjects' health or sex life by certain responsible parties in terms of Section 112(2)(c) of the Protection of Personal Information Act published on 26 September
Technology & Communications

Draft Regulations relating to the processing of data subjects' health or sex life by certain responsible parties in terms of Section 112(2)(c) of the Protection of Personal Information Act published on 26 September

The Information Regulator of South Africa published draft regulations for comment on 26 September 2025 – Regulations Relating to the Processing of Data Subjects' Health or Sex Life...

An overview of the European Union’s Model Contractual Clauses for Artificial Intelligence
Corporate & Commercial Law

An overview of the European Union’s Model Contractual Clauses for Artificial Intelligence

In 2024, the European Union (EU) formally adopted the Artificial Intelligence Act (AI Act). The AI Act will be fully applicable in 2026, with some provisions currently in force. Flowing...

Lessons from an entrepreneurial journey: Reinvention, resilience and the power of community
Technology & Communications

Lessons from an entrepreneurial journey: Reinvention, resilience and the power of community

In our latest CDH Women's Empowerment podcast series, Tayyibah Suliman, Director and Sector Head, sits down with Hanli Brink, Operations Director of the Stellenbosch Network, to talk...

Implications for crypto asset service providers from High Court ruling on crypto and exchange control
Technology & Communications

Implications for crypto asset service providers from High Court ruling on crypto and exchange control

In the case of Standard Bank of South Africa v South African Reserve Bank and Others (047643/2023) ZAGPPHC 481 (delivered 15 May 2025), the Gauteng High Court ruled that South Africa’s...

Navigating the legal landscape of AgriTech
Agriculture, Aquaculture & Fishing

Navigating the legal landscape of AgriTech

Agricultural technology, better known as AgriTech, is the use of modern technology to improve agricultural processes. AgriTech has changed the way many agricultural businesses worldwide...

Draft Residential Communities Industry Code of Conduct out for comment
Corporate & Commercial Law

Draft Residential Communities Industry Code of Conduct out for comment

The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa’s primary data protection law and empowers the Information Regulator (Regulator) to oversee compliance...

New CCTV by-law from the City of Johannesburg
Corporate & Commercial Law

New CCTV by-law from the City of Johannesburg

The council for the City of Johannesburg Metropolitan Municipality (CoJ) recently approved the Privately-Owned Closed-Circuit Television Surveillance Camera By-Law (CCTV Camera By-Law)....

Outsourcing in 2025: Global and local outlooks
Corporate & Commercial Law

Outsourcing in 2025: Global and local outlooks

The Forbes Technology Council reports that that the outsourcing market has grown dramatically in the last few years, especially in relation to information technology (IT) spend. Spending...

Navigating the Information Regulator’s guidance note on direct marketing
Technology & Communications

Navigating the Information Regulator’s guidance note on direct marketing

On 3 December 2024, the Information Regulator released a guidance note on direct marketing (Guidance Note) under the Protection of Personal Information Act 4 of 2013 (POPIA). Leading...

Guidance Note on Direct Marketing
Technology & Communications

Guidance Note on Direct Marketing

On 3 December 2024, the Information Regulator published a Guidance Note onDirectMarketing. 

Summit for the Future and the Global Digital Compact: Key considerations and application for South Africa
Corporate & Commercial Law

Summit for the Future and the Global Digital Compact: Key considerations and application for South Africa

Between 20 and 23 September 2024, the Summit for the Future was hosted by the United Nations (UN). The aim of this summit was to further efforts to meet existing international commitments...

Summary of the POPIA case of Munetsi v Madhuyu and Another
Technology & Communications

Summary of the POPIA case of Munetsi v Madhuyu and Another

The Western Cape High Court recently handed down a judgment that applied certain provisions of the Protection of Personal Information Act 4 of 2013 (POPIA). Mr Munetsi (the applicant),...

Webinar Recording | AI on Trial Navigating legal risks in the age of AI
Technology & Communications

Webinar Recording | AI on Trial Navigating legal risks in the age of AI

Watch our team of experts as they discuss the intersection of law and AI and the opportunities it offers. 

AI in Focus: Legal and Ethical Considerations for Modern Businesses
Technology & Communications

AI in Focus: Legal and Ethical Considerations for Modern Businesses

Watch the recording of a virtual panel discussion on the transformative power of AI.

Women in Tech Law: Navigating the industry and developing trends
Technology & Communications

Women in Tech Law: Navigating the industry and developing trends

In this episode of CDH conversations, Director Tayyibah Suliman and Candidate Attorney, Zachary Kokosioulis discuss the role of women within the technology law space, and also discuss...

The aftermath of Crowdstrike: Re-evaluating the importance of severity classifications
Corporate & Commercial Law

The aftermath of Crowdstrike: Re-evaluating the importance of severity classifications

The recent fault in a Crowdstrike update on 19 July 2024 resulted in one of the most widespread IT outages in recent history and has continued to dominate newsfeeds globally. This...

Proposed directive on crypto transactions
Technology & Communications

Proposed directive on crypto transactions

South Africa’s cryptocurrency landscape may be in for a shift as the Financial Intelligence Centre (FIC) released a proposed directive regarding cryptoassettransfers 

The impact of AI and the power of streaming platforms in the South African context
Technology & Communications

The impact of AI and the power of streaming platforms in the South African context

Regulation of AI in South Africa
Technology & Communications

Regulation of AI in South Africa

Sector Head Tayyibah Suliman from our Technology and Communications sector joined Francis Herd on ENCA to discuss the regulation of AI in South Africa.

An overview of the Artificial Intelligence in the South African Financial Sector report
Corporate & Commercial Law

An overview of the Artificial Intelligence in the South African Financial Sector report

On 24 November 2025, the South African Reserve Bank Prudential Authority (PA) and the Financial Sector Conduct Authority (FSCA) released a joint report on Artificial Intelligence (AI)...

Recent privacy updates in South Africa and abroad
Corporate & Commercial Law

Recent privacy updates in South Africa and abroad

South Africa is experiencing a sharp increase in reported data breaches. The Information Regulator (Regulator) noted 2,374 breaches in the 2024/25 financial year, an average of 198...

Draft Regulations relating to the processing of data subjects' health or sex life by certain responsible parties in terms of Section 112(2)(c) of the Protection of Personal Information Act published on 26 September
Technology & Communications

Draft Regulations relating to the processing of data subjects' health or sex life by certain responsible parties in terms of Section 112(2)(c) of the Protection of Personal Information Act published on 26 September

The Information Regulator of South Africa published draft regulations for comment on 26 September 2025 – Regulations Relating to the Processing of Data Subjects' Health or Sex Life...

An overview of the European Union’s Model Contractual Clauses for Artificial Intelligence
Corporate & Commercial Law

An overview of the European Union’s Model Contractual Clauses for Artificial Intelligence

In 2024, the European Union (EU) formally adopted the Artificial Intelligence Act (AI Act). The AI Act will be fully applicable in 2026, with some provisions currently in force. Flowing...

Implications for crypto asset service providers from High Court ruling on crypto and exchange control
Technology & Communications

Implications for crypto asset service providers from High Court ruling on crypto and exchange control

In the case of Standard Bank of South Africa v South African Reserve Bank and Others (047643/2023) ZAGPPHC 481 (delivered 15 May 2025), the Gauteng High Court ruled that South Africa’s...

Navigating the legal landscape of AgriTech
Agriculture, Aquaculture & Fishing

Navigating the legal landscape of AgriTech

Agricultural technology, better known as AgriTech, is the use of modern technology to improve agricultural processes. AgriTech has changed the way many agricultural businesses worldwide...

Draft Residential Communities Industry Code of Conduct out for comment
Corporate & Commercial Law

Draft Residential Communities Industry Code of Conduct out for comment

The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa’s primary data protection law and empowers the Information Regulator (Regulator) to oversee compliance...

New CCTV by-law from the City of Johannesburg
Corporate & Commercial Law

New CCTV by-law from the City of Johannesburg

The council for the City of Johannesburg Metropolitan Municipality (CoJ) recently approved the Privately-Owned Closed-Circuit Television Surveillance Camera By-Law (CCTV Camera By-Law)....

Outsourcing in 2025: Global and local outlooks
Corporate & Commercial Law

Outsourcing in 2025: Global and local outlooks

The Forbes Technology Council reports that that the outsourcing market has grown dramatically in the last few years, especially in relation to information technology (IT) spend. Spending...

Navigating the Information Regulator’s guidance note on direct marketing
Technology & Communications

Navigating the Information Regulator’s guidance note on direct marketing

On 3 December 2024, the Information Regulator released a guidance note on direct marketing (Guidance Note) under the Protection of Personal Information Act 4 of 2013 (POPIA). Leading...

Guidance Note on Direct Marketing
Technology & Communications

Guidance Note on Direct Marketing

On 3 December 2024, the Information Regulator published a Guidance Note onDirectMarketing. 

Summit for the Future and the Global Digital Compact: Key considerations and application for South Africa
Corporate & Commercial Law

Summit for the Future and the Global Digital Compact: Key considerations and application for South Africa

Between 20 and 23 September 2024, the Summit for the Future was hosted by the United Nations (UN). The aim of this summit was to further efforts to meet existing international commitments...

Summary of the POPIA case of Munetsi v Madhuyu and Another
Technology & Communications

Summary of the POPIA case of Munetsi v Madhuyu and Another

The Western Cape High Court recently handed down a judgment that applied certain provisions of the Protection of Personal Information Act 4 of 2013 (POPIA). Mr Munetsi (the applicant),...

The aftermath of Crowdstrike: Re-evaluating the importance of severity classifications
Corporate & Commercial Law

The aftermath of Crowdstrike: Re-evaluating the importance of severity classifications

The recent fault in a Crowdstrike update on 19 July 2024 resulted in one of the most widespread IT outages in recent history and has continued to dominate newsfeeds globally. This...

Proposed directive on crypto transactions
Technology & Communications

Proposed directive on crypto transactions

South Africa’s cryptocurrency landscape may be in for a shift as the Financial Intelligence Centre (FIC) released a proposed directive regarding cryptoassettransfers 

From vision to fruition.