🇿🇦
South Africa
Protection of Personal Information Act (POPIA)
Africa🟢 Comprehensive
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
Information Regulator
Overview
South Africa's POPIA, effective 2021, is Africa's most comprehensive data protection law. It established the Information Regulator, which enforces compliance and issues guidance to organizations.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in South Africa?+
South Africa is governed by the Protection of Personal Information Act (POPIA). The law is enforced by the Information Regulator. According to our analysis, the country has a Comprehensive level of data protection framework.
Does South Africa require a Data Protection Officer (DPO)?+
Yes, under the Protection of Personal Information Act (POPIA), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in South Africa?+
Partially. While Protection of Personal Information Act (POPIA) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in South Africa?+
Under the Protection of Personal Information Act (POPIA), organizations must notify the Information Regulator and affected individuals without undue delay in the event of a personal data breach.