South Africa
ComprehensiveProtection of Personal Information Act (POPIA)
Authority: Information Regulator | Enforcement: Active | Enacted: July 2021
Overview
South Africa's POPIA, fully enforceable since July 2021, provides comprehensive data protection aligned with international standards. The Information Regulator actively issues enforcement notices and guidance.
14-Topic Coverage
Data Protection Authority
Fully AddressedInformation Regulator oversees POPIA compliance with investigation and enforcement powers.
Consent Requirements
Fully AddressedConsent is one of several justifications. Must be voluntary, specific, and informed.
Data Subject Rights
Fully AddressedRights to access, correction, deletion, objection, and not to be subject to automated decisions.
Cross-Border Transfer
Fully AddressedTransfers to countries with adequate protection, consent, or necessary for contract performance.
Breach Notification
Fully AddressedMust notify Information Regulator and data subjects as soon as reasonably possible.
DPO Requirements
Fully AddressedInformation Officer must be registered with the Regulator.
Children's Data
Fully AddressedConsent of competent person required for children under 18. Processing of children's data is restricted.
Penalties & Enforcement
Fully AddressedFines up to ZAR 10 million and/or imprisonment up to 10 years for certain offences.
Sector-Specific Rules
Fully AddressedECTA for electronic communications, NCA for consumer credit, health sector regulations.
Cookie/Tracking
Partially AddressedNo specific cookie law. ECTA and POPIA general provisions apply.
AI & Automated Decisions
Partially AddressedSection 71 provides rights regarding automated decisions. AI governance framework developing.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept. All responsible parties have the same obligations.
Government Data
Fully AddressedPAIA provides access to government information. POPIA applies to government processing.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate South Africa's regulations.
Book a Consultation