Regulations › Rest of world › South Africa
POPIA
Protection of Personal Information Act (South Africa)
WhenIn effect since 1 July 2021
Who enforces itInformation Regulator
Who it applies toResponsible parties processing personal information in South Africa.
Tell the regulatorNotify the Regulator as soon as reasonably possible after discovering a security compromise
DPO requiredEvery public and private body has an Information Officer (the head by default), who must be re…
RegistrationNo general controller registration
Transfers abroadTransfers abroad allowed only with adequate protection (law, binding corporate rules or agreem…
Request deadline30 days: access requests follow PAIA timelines
Maximum fineAdministrative fine up to R10 million (about USD 550,000)
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws