South Africa's AI Policy Imploded Because Nobody Checked the Footnotes

On April 26, 2026, South Africa's Communications and Digital Technologies Minister Solly Malatsi pulled the country's draft National AI Policy from public comment — less than three weeks after it was published in the Government Gazette. The reason: an unknown number of the document's academic citations were fabricated, almost certainly hallucinated by an AI tool that someone on the drafting team used without verifying the output [1][2].

The irony is difficult to overstate. A policy designed to govern artificial intelligence was undone by artificial intelligence. But the incident is more than an embarrassment. It exposes systemic failures in how governments produce policy documents, raises questions about institutional capacity across the continent, and lands in a global context where AI-generated fiction is infiltrating courts, consulting reports, and academic conferences at an accelerating pace.

What Happened

The 86-page draft National AI Policy was approved by Cabinet on March 25, 2026, and published in the Government Gazette on April 10 for a 60-day public comment period, with a deadline of June 10 [3][4]. News24 broke the story on April 24, reporting that the document contained academic references that could not be verified. Editors of several journals confirmed that articles attributed to their publications were never published [1].

Of the 67 references listed in the draft's bibliography, at least six were identified as outright fabrications — citations to papers, authors, and in some cases journals that do not exist [5]. Others pointed to non-peer-reviewed material. News24 reported that "several authors credited with foundational research had never written on the topics attributed to them" [1].

Malatsi's response came two days later. "This failure is not a mere technical issue but has compromised the integrity and credibility of the draft policy," the minister said in a statement [3][6]. He described AI-generated citations included without verification as "the most plausible explanation" and pledged "consequence management for those responsible for drafting and quality assurance" [2][3].

The Department of Communications and Digital Technologies (DCDT) initially attempted to minimize the damage. Before the withdrawal, department officials argued that "technical referencing matters do not affect the substance, integrity or policy direction" of the draft [7]. That position did not hold.

Who Drafted It and Who Failed to Check

No individual officials have been publicly named as responsible for the drafting. Malatsi instructed the Director-General of the DCDT to investigate and "act against anyone found to have done wrong" [8]. But public reporting has not clarified key questions: Was the document produced entirely in-house? Were external consultants or AI tools contracted? At what stage were the fabricated references introduced?

What is clear is that the document passed through multiple institutional checkpoints — drafting, departmental review, Cabinet approval — without anyone verifying whether the cited sources existed [9]. Khusela Diko, chair of the Parliamentary Portfolio Committee on Communications, called the withdrawal necessary and urged a rigorous review "without using ChatGPT this time" [7].

The absence of a fact-checking step is not unusual in government policy production. Internal review processes typically focus on policy substance and legal alignment, not bibliographic verification. But when AI tools are used in drafting, the failure mode changes. A human researcher who fabricates a citation is committing deliberate fraud. A large language model that generates a plausible-sounding reference is doing what it was statistically trained to do. The question is whether anyone in the chain understood that distinction.

What the Policy Actually Proposed

The draft was not a trivial document. It proposed establishing an AI Ethics Board, an AI Safety Institute, and an AI Insurance Superfund to compensate individuals affected by "AI-driven outcomes" [10]. It addressed data sovereignty, compute infrastructure, and sectoral applications in agriculture, healthcare, and public services.

Critics had already raised substantive concerns before the citations scandal broke. Technology investor Stafford Masie argued the policy risked "regulating away" South Africa's participation in the global AI economy [2]. A separate analysis from TechPolicy.Press found the draft left critical governance decisions unresolved, with multiple provisions marked "OPTION" — effectively deferring choices on minimum terms for foreign compute infrastructure investment, data sovereignty requirements, and technology transfer conditions [10].

The TechPolicy.Press analysis argued that South Africa was treating itself "as a consumer of AI systems rather than a stakeholder in their governance," despite controlling 88% of global platinum-group metal reserves essential to semiconductor manufacturing [10]. The citations scandal has now overshadowed these substantive policy debates.

The Cost of the Withdrawal

No timeline has been provided for a replacement draft. The original policy had been in development since at least 2024 [7]. Its withdrawal means South Africa remains without a formal AI governance framework at a moment when other African nations are moving ahead.

The concrete costs include:

• Regulatory limbo: Companies and public sector projects that were waiting on the framework to guide AI procurement, deployment, and compliance decisions have no policy anchor.
• Credibility damage: The DCDT's standing as the institution "entrusted with the role to lead South Africa's digital policy environment" — Malatsi's own framing — has been undermined [6].
• Lost consultation input: Any public comments submitted before the withdrawal are effectively voided.
• Opportunity cost: Months of bureaucratic and political capital spent moving the draft through Cabinet and the Gazette process have been wasted.

How South Africa Compares to Its Continental Peers

South Africa ranks second in Sub-Saharan Africa on Oxford Insights' 2025 Government AI Readiness Index, with a score of 52.91, just behind Mauritius at 53.27 [11]. It leads the region in data infrastructure and technology sector capacity. But the index measures readiness, not execution.

Source: Oxford Insights

Data as of Dec 1, 2025CSV

Among peer economies, the comparison is instructive. Egypt adopted a National AI Strategy in 2021 and established a centralized National Council for Artificial Intelligence, scoring 81 on the Africa AI Readiness Index [12]. Kenya launched its National AI Strategy 2025–2035 in March 2025, targeting specific economic sectors [12]. Nigeria introduced a National Digital Economy and E-Governance Bill requiring high-risk AI systems to obtain licenses and submit annual impact assessments, and jumped 31 places to 72nd globally in the 2025 index [12].

South Africa's incident does not necessarily reflect negligence over institutional capacity, but it does reflect a gap between ambition and process maturity. The country has the technical infrastructure and policy expertise to lead on the continent. What it apparently lacked was a quality assurance process calibrated for the specific risks of AI-assisted document production.

The Global Epidemic of Hallucinated Citations

South Africa's case sits within a rapidly growing pattern. A database tracking AI-generated fabrications in court filings has cataloged 1,227 cases globally as of early 2026, up from 200 a year earlier, with roughly five to six new cases documented daily [13]. Of these, 1,022 involved fabricated case citations, 323 involved false quotes from real cases, and 492 involved misrepresented holdings [13].

The problem extends well beyond courtrooms. In October 2025, a A$440,000 report prepared by Deloitte for the Australian government was found to contain hallucinated academic sources and a fabricated quote from a federal court judgment. The firm issued a partial refund [14]. The following month, a separate CA$1.6 million Deloitte report for Newfoundland and Labrador's government was found to contain at least four false citations [15]. At the 2026 International Conference on Learning Representations, 20% of sampled papers contained at least one AI hallucination [16].

Source: OpenAlex

Data as of Jan 1, 2026CSV

Academic research on AI policy in Africa has surged — from under 3,000 papers in 2018 to nearly 37,000 in 2025, according to OpenAlex data. This explosion of literature makes manual citation verification increasingly difficult, while simultaneously creating more plausible-seeming source material for AI tools to hallucinate.

The Steelman Case for the Officials

The instinct to blame individual civil servants deserves scrutiny. Generative AI tools are now embedded in standard government productivity software — Microsoft 365 Copilot, Google Workspace's Gemini integration — and are available by default to employees who may have received no training on their limitations [17]. AI hallucination — the generation of plausible but fabricated information — is not a bug that users are warned about at the point of use. It is an inherent characteristic of large language models that requires specific literacy to recognize.

If a civil servant used an AI writing assistant to help draft sections of the policy document, the fabricated citations would have appeared in the same format and with the same apparent authority as legitimate ones. Without explicit training on the hallucination problem, and without institutional protocols requiring independent verification of AI-generated content, expecting individual officials to catch the error is arguably unreasonable.

This does not absolve the institution. It shifts the question from individual blame to systemic responsibility: Who authorized the deployment of AI tools in the policy drafting workflow without safeguards? Does the DCDT have guidelines on AI use in document production? If not, the failure lies at the institutional level, not with the individual drafter.

What Verification Standards Exist — and What's Missing

No country currently mandates citation verification for AI-assisted government policy documents as a general requirement. The closest analogues come from the judiciary. In the United States, over 300 federal judges have adopted standing orders requiring attorneys to disclose AI use and certify that citations have been verified by a human [17][18]. Judge Brantley Starr of the Northern District of Texas pioneered this approach in 2023, warning explicitly about hallucinated citations [17].

The EU AI Act, which entered into force in August 2024 and becomes fully applicable in August 2026, classifies AI systems by risk level and imposes transparency obligations, but does not specifically address citation verification in government documents [19]. The OECD's AI Principles, updated in 2024, call for transparency and accountability but operate as recommendations, not enforceable standards [20].

The gap is structural. Courts have moved faster than legislatures because judges experienced the consequences directly — fabricated case law in filings before them. Governments producing policy documents face the same risk but have not yet developed comparable safeguards. South Africa's incident may accelerate that process.

Legal and Constitutional Implications

The legal consequences of submitting a policy document with fabricated citations are less clear-cut than in a court filing, where sanctions for fraudulent citations are well-established. South Africa's Constitution requires administrative action to be lawful, reasonable, and procedurally fair under the Promotion of Administrative Justice Act (PAJA) [10].

Several questions remain open:

• Validity of prior consultations: If stakeholders submitted comments on the draft in reliance on the cited research, those consultations may need to be restarted entirely rather than simply incorporated into a revised draft.
• Official misconduct: Malatsi's promise of "consequence management" suggests disciplinary proceedings are possible, but the legal basis depends on whether officials knowingly submitted unverified content or failed to follow existing quality assurance protocols [3].
• Liability: If any entity — a company, university, or government department — made decisions in reliance on the draft policy's cited research, there is at least a theoretical basis for a claim of detrimental reliance, though proving damages would be difficult given the policy's draft status.

No formal legal proceedings have been announced. The Director-General's investigation is ongoing [8].

What Comes Next

South Africa now faces a choice about how to rebuild. The substantive policy questions — how to govern AI deployment, whether to establish a safety institute, how to negotiate with hyperscaler companies seeking to build compute infrastructure on the continent — remain unresolved and urgent.

The DCDT could treat this as a narrow quality-assurance failure, fix the citations, and re-publish. Or it could use the episode to fundamentally rethink how AI tools are used within government, establishing verification protocols that could serve as a model for other countries facing the same challenge.

The broader lesson is not specific to South Africa. Every government that uses AI tools in policy production — and that is increasingly all of them — faces the same risk. The question is whether they will learn from South Africa's public embarrassment or wait for their own.