What the outage showed
The Microsoft 365 outage that began on 12 November 2026 was global, and it reached South African institutions. TechCentral, carrying Reuters reporting, said on 13 November that it stretched beyond 18 hours. It began at about 8pm South African time on Thursday and had not been resolved by Friday. The City of Cape Town warned that users might be unable to send or receive email. The South African Revenue Service said Outlook, Teams and other Microsoft 365 applications might be affected. The University of Cape Town's ICT service said Microsoft had advised users of difficulty connecting. According to that report, Microsoft blamed server problems and said it was not aware of any malicious activity.
The disruption cannot be attributed to South Africa's market structure. The same article reports effects in 74 countries and territories. Counting only complaints, Downdetector South Africa logged 874 Microsoft 365 reports at 7.53am. Those figures measure complaints, not affected accounts, and the article names no private South African firms despite its headline. The case that this is a local policy failure is therefore not made by the outage itself.
The strongest case for intervention
Regulators have a serious argument. When one vendor supplies email, collaboration and identity for governments and businesses, a single fault becomes a systemic event. If licensing terms also make it costly to move workloads elsewhere, customers cannot diversify even after an incident like this. An eToro analyst quoted in the TechCentral piece said the outage hands every IT department a reason to think twice before putting more of their business in one provider's hands. A competition authority could reasonably ask whether switching costs are artificially high.
What the Commission has actually done
We should be careful about the regulatory record. In April 2024, Bloomberg, reproduced by Data Center Knowledge, reported that the Competition Commission would accuse Microsoft of charging too much for businesses to move cloud licences to other vendors, citing people familiar with the filing. Microsoft said it was not aware of a complaint and that its policies let South African customers bring licences to any South African cloud provider at no additional cost. We could not find an official Commission statement, filing or outcome on that matter. The Commission's 2026 media-release list, which we reviewed through 5 November 2026, contains no Microsoft or cloud item. Readers should treat the cloud-licensing probe as reported but unconfirmed. We cannot say whether it is live, resolved or dormant.
The Commission's confirmed digital-markets work is the Media and Digital Platforms Market Inquiry. Its 13 November 2025 media statement says the inquiry, opened under section 43B(1)(a) of the Competition Act, ran for 24 months. It found that Google, Meta, Microsoft, TikTok, X and AI companies such as OpenAI dominate the main gateways through which South Africans find information. Microsoft's part was narrow: the Commission said its MSN service contracts relatively few South African publishers, and Microsoft agreed to extend its MSN news contracts to five additional national publishers. The headline remedy was a R688 million Media Support Package agreed with Google and YouTube. Nothing in that statement addresses cloud infrastructure or enterprise software.
Why that matters
This is the gap. The outage affected tax administration, municipal email and universities, none of which the media inquiry was built to examine. Its remedies concern news distribution and advertising technology. A reader who assumes the 2025 inquiry gave the Commission a handle on cloud concentration would be mistaken.
A proportionate response
The lazy responses are mandatory domestic hosting, forced multi-vendor rules, or fines tied to downtime. Those would raise costs and could reduce reliability, since a smaller local provider is not automatically more resilient than a hyperscaler with global redundancy. The Commission's media remedies are instructive in another way. Most major platforms agreed to them after two months of negotiation, which suggests a negotiated, evidence-led approach can work faster than litigation.
A proportionate agenda would have three parts:
- Publish the evidence on switching costs. If the Commission has a cloud-licensing file, it should say what it found, including whether Microsoft's stated licence-portability policy holds in practice. Silence leaves everyone guessing.
- Treat resilience as procurement policy. Government bodies such as SARS and municipalities can require tested fallbacks, such as an alternative mail route, without any change to competition law.
- Reserve enforcement for conduct. An outage is an operational failure, not an abuse of dominance. Competition law should engage only where licensing, bundling or interoperability terms actually lock customers in.
The open internet is best served by customers who can leave, not by rules that decide where data must sit. The commissioners' own record shows the tools exist. They should now say whether the cloud question is part of their work or has been dropped.
Bottom line
The 12 November outage is a real warning about concentration, but it is not evidence of a competition violation. South Africa's regulator has built credible capacity in digital markets, and the media inquiry shows it can negotiate. What the public record does not yet show is any confirmed action on cloud licensing. That is the question worth pressing.