← Legal Portal
🇿🇦

Protection of Personal Information Act 4 of 2013 (POPIA)

Act
South Africa Source: Information Regulator / South African Government
Data ProtectionPrivacyPOPIAOnline Business

Summary (Plain English)

South Africa's comprehensive data protection law, fully enforceable since July 2021. Applies to all organizations processing personal information of South African residents. Key requirements: lawful processing conditions, purpose limitation, data minimization, retention limitation, data quality, openness, security safeguards. Organizations must appoint an Information Officer and register with the Information Regulator. Penalties: fines up to ZAR 10 million and/or imprisonment.

What This Means For You

  • • All businesses processing personal data must comply
  • • Information Officer must be appointed and registered
  • • Consent or other lawful basis required
  • • Cross-border transfers restricted
  • • Fines up to ZAR 10 million for non-compliance

Original Source

https://popia.co.za

Content sourced from Information Regulator / South African Government. Always refer to the official document for authoritative text.

Not legal advice. This summary is for informational purposes only. ONIM does not store or republish full legal texts. Always consult a qualified legal professional for advice specific to your situation.