Regulations › Rest of world › South Africa
POPIA
Protection of Personal Information Act (South Africa)
WhenIn effect since 1 July 2021
Who enforces itInformation Regulator
Who it applies toResponsible parties processing personal information in South Africa.
Tell the regulatorNotify the Regulator as soon as reasonably possible after discovering a security compromise
DPO requiredEvery public and private body has an Information Officer (the head by default), who must be re…
RegistrationNo general controller registration
Transfers abroadTransfers abroad allowed only with adequate protection (law, binding corporate rules or agreem…
Request deadline30 days: access requests follow PAIA timelines
Maximum fineAdministrative fine up to R10 million (about USD 550,000)
Data protection authority Information Regulator
- Address
- Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191✓
- enquiries@inforegulator.org.za ✓
- Complaints
- POPIAComplaints@inforegulator.org.za PAIAComplaints@inforegulator.org.za ✓
- Phone
- +27 10 023 5200 +27 800 017 160 (toll free) ✓
- Website
- inforegulator.org.za
- Register
- Registration portal✓
- Breaches
- Report a breach
Breach reports go through the eServices portal.
Checked 18 Oct 2026. ✓ confirmed on the authority's own site. Report a change
Local help in South Africa
Law firms, training centers and other providers in South Africa can apply to be listed here. We check each one before it shows.
List your organizationRegulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws