Data Theft in South Africa: How to Stop Evidence from Disappearing

Businesses rely on computers, cellphones, hard drives and cloud storage to keep valuable information safe. This information might include customer lists, pricing details, business plans, product designs or confidential trade secrets.

But what happens when a former employee, business partner or competitor is suspected of taking confidential information and keeping it unlawfully? What if you believe they may delete the files or hide important documents before you can take legal action?

In certain circumstances, South African law provides a powerful remedy called an Anton Piller order.

An Anton Piller order is a court order designed to preserve specific evidence that is important to a legal claim and may be hidden, destroyed or removed if the other party is warned.

It is an exceptional remedy because it can seriously affect the privacy and business operations of the person or company against whom it is granted. It is therefore not something a business can obtain simply because it suspects that information has been stolen.

What Is an Anton Piller Order?

An Anton Piller order allows a court to authorise specific steps to preserve important evidence held by another person or business.

For example, a company may discover evidence suggesting that a former employee has copied confidential customer records or technical drawings and passed them to a competitor. If there is a genuine risk that the relevant evidence will be destroyed before a court case can proceed, an Anton Piller order may be appropriate.

The application is usually made on an ex parte basis. This means the applicant approaches the court without notifying the other party beforehand. The reason is simple: advance warning could allow that party to destroy or hide the evidence.

However, an ex parte application does not mean the affected party loses the right to challenge the order. The order must contain appropriate safeguards, and the affected party may approach the court to have it reconsidered, varied or set aside.

An Anton Piller order is not a criminal search warrant. It is a civil court remedy intended primarily to preserve evidence for legal proceedings.

What Must a Company Prove to Obtain an Anton Piller Order?

South African courts apply a strict test because the remedy can interfere with a person’s privacy and other rights.

In Shoba v Officer Commanding, Temporary Police Camp, Wagendrift Dam 1995 (4) SA 1 (A), the court identified three essential requirements that an applicant must establish on a prima facie basis.

In plain English, the company must show the following:

1. You have a genuine legal claim that you intend to pursue

You must show that you have a proper legal claim against the person or company concerned and intend to take the matter further through legal proceedings.

For example, there may be evidence of a breach of a confidentiality agreement, unlawful use of trade secrets or another legally actionable wrong.

A mere suspicion that a competitor has behaved unfairly is not enough.

2. The other party possesses specific, important evidence

You must identify the particular documents, files or other items believed to be in the other party’s possession. These must be important evidence supporting your intended legal claim.

Examples might include identified business records, confidential technical drawings or specified electronic files.

You cannot use an Anton Piller order simply to search through another company’s computers to see whether you might discover something useful. The order is not a fishing expedition.

3. There is a real and well-founded risk that the evidence will disappear

You must provide a sound factual basis for believing that the evidence may be hidden, destroyed or removed before the case reaches trial or the ordinary discovery stage.

Discovery is the legal process through which parties to a court case disclose relevant documents and information to one another.

The court will consider the evidence supporting the application, the potential harm to both sides and whether the proposed order is no broader than necessary.

Meeting these three requirements does not automatically guarantee an order. The court retains discretion to decide whether the remedy is justified and what safeguards are necessary.

How Is an Anton Piller Order Carried Out?

An Anton Piller order must be executed strictly according to the wording of the court order. The people involved cannot simply search wherever they wish or take anything they consider interesting.

Depending on the order, the process may involve the following safeguards and procedures.

An independent supervising attorney

An independent attorney, commonly referred to as the supervising attorney, oversees the execution of the order in accordance with its terms. This attorney helps ensure that the affected party understands what is happening and that the search stays within the authorised limits.

The precise duties of the supervising attorney depend on the order granted by the court.

The Sheriff and authorised experts

The Sheriff and any other people expressly authorised by the order carry out the permitted steps. The applicant’s legal representatives and suitably qualified IT or forensic experts may be allowed to assist, but only to the extent the order permits.

For example, an authorised expert might be required to identify specified electronic files or create a forensic copy of a particular storage device.

The applicant and its representatives do not have an unrestricted right to browse private emails, unrelated business records or personal information.

Preserving the evidence

The order should set out how relevant documents and electronic evidence are to be identified, copied, secured and kept safe.

Depending on the circumstances, copies or devices may be placed in the custody of the Sheriff, the supervising attorney or another person specified in the order. The order may also regulate who can access the preserved material and when it may be examined or used.

Preserving evidence does not automatically give the applicant the right to use every document obtained. Disputes about confidentiality, relevance, privilege or permitted access may need to be resolved through the court.

What Are the Limits of an Anton Piller Order?

An Anton Piller order is designed primarily to preserve evidence for existing or intended legal proceedings. It is not a general licence to investigate another business.

It also does not automatically give the applicant ownership of documents, equipment or other property found during the process.

If a company wants the return of property it owns, or wants a court to prevent someone from using confidential information, it may need additional or different legal relief. The appropriate remedy depends on the facts and the rights being asserted.

The order must be carefully drafted to identify the evidence sought, define the permitted steps and protect the rights of the affected party.

What Happens If the Order Is Abused?

An Anton Piller order can have serious consequences if it is wrongly obtained or improperly executed.

An applicant must make a full and honest disclosure of material facts when applying without notifying the other party. This includes relevant facts that may count against granting the order.

The applicant must also explain why urgent intervention is necessary and ensure that the proposed order is properly limited.

If the order is later challenged, the court may set it aside or vary it. Depending on the circumstances, the court may order the return of documents, require electronic copies to be destroyed, restrict the use of information obtained and award legal costs against the applicant.

Damages may also be possible where the legal requirements for liability are met. However, compensation is not automatic merely because an order is set aside.

A practical example is the 2025 High Court decision in Ex Parte Niemand and Another [2025] ZAGPPHC 1110. The court set aside an Anton Piller order after identifying serious problems with the application and its execution, and ordered the return of documents, destruction of specified electronic records and payment of legal costs on an attorney-and-client scale.

The case illustrates why strict compliance with the court order and protection of the affected party’s rights are essential.

The Advantages and Risks

The advantage: An Anton Piller order can help preserve vital evidence before it is destroyed or concealed. This may be particularly important where confidential business information or electronic records are central to a legal dispute.

The risk: The remedy is intrusive and exceptional. An application that lacks proper evidence, fails to disclose material facts or seeks overly broad relief can fail. Improper execution can also lead to the order being set aside and serious cost consequences.

What Should Your Business Do If Confidential Information Has Been Taken?

If you suspect that an employee, former employee, business partner or competitor has unlawfully taken confidential information, avoid trying to conduct your own unauthorised search of their devices or premises.

Instead:

Acting quickly can be important, but the application must still meet the legal requirements.

The Bottom Line

An Anton Piller order can be a valuable legal tool for South African businesses facing the possible loss of vital evidence. However, it is not a shortcut to obtaining a competitor’s information or proving a case through an unrestricted search.

The company applying for the order must establish a genuine legal claim, identify specific and important evidence held by the other party, and show a real and well-founded risk that the evidence may disappear. The court must also ensure that the order is properly limited and includes appropriate safeguards.

When confidential information is at risk, obtaining the right legal advice early can make the difference between preserving crucial evidence and losing it altogether.

Get in touch with us today. We will secure the necessary evidence to effectively protect and enforce your legal rights.