POPIA — Free Compliance Assessment
Assess your compliance with the South African personal data protection law for free.
In force
Since July 2021
Regulator
Information Regulator
Penalties
10M ZAR + prison
What is POPIA?
The Protection of Personal Information Act (POPIA) is South Africa's main personal data protection law. Fully applicable since July 2021, it is largely inspired by the European GDPR and imposes strict obligations on organizations processing South African residents' data.
POPIA is considered the reference framework in Africa and has inspired several legislations across the continent.
Main obligations
- →8 conditions for lawful processing
- →Appointment of an Information Officer
- →Security breach notification
- →Data subject rights (access, correction, deletion)
- →Regulated cross-border transfers
- →Special protection for sensitive data