26:
276:
54:
to perform certain duties and functions in terms of this Act and the
Promotion of Access to Information Act, 2000; to provide for the issuing of codes of conduct; to provide for the rights of persons regarding unsolicited electronic communications and automated decision making; to regulate the flow of personal information across the borders of the Republic; and to provide for matters connected therewith.
53:
Act to promote the protection of personal information processed by public and private bodies; to introduce certain conditions so as to establish minimum requirements for the processing of personal information; to provide for the establishment of an
Information Regulator to exercise certain powers and
191:
assented to the Act on 19 November 2013. As part of the regulation a new government agency was created, the
Information Regulator, an independent body which is empowered to monitor and enforce compliance of the PoPI Act within the public and private sector. The act came into force 1 July 2020, which
239:
The act elevates the obligations placed on entities that process information regarding children, religious beliefs, race, ethnic origin, trade union membership, health, sex life, criminal behaviour and biometric
192:
commenced a one-year grace period during which all South
African entities were expected to become compliant. The grace period ended 30 June 2021, with the commencement of the act on the 1 July 2021.
606:
262:
607:"Information Regulator - Infringement notice and R5 Million administrative fine issued to the Department of Justice and constitutional Development for contravention of POPIA"
541:
390:. The period between assent and commencement will be spent developing operating procedures and other documented processes for the implementation of provisions of the Act.
370:
acts. It is empowered to monitor and enforce compliance of the acts within the public and private sector. It functions in terms of the two acts and is accountable to the
382:
South Africa does not yet have a formal cohesive piece of legislation in force which governs cybercrimes in South Africa. The
Cybercrimes Act has been signed by the
219:
if processing is necessary for pursuing the legitimate interests of the responsible party or of a third party to whom the information is supplied.
184:
249:
The PoPI Act applies to all persons and organisations within the borders of South Africa, and extends to visitors and illegal immigrants.
664:
387:
371:
592:
674:
669:
180:
236:
Direct marketing, the sale and use of electronic directories and automated decision making are also severely curtailed.
481:
84:
33:
383:
188:
74:
498:
25:
224:
Private and public entities must report data leaks to the affected people and the
Information Regulator.
210:
if it is necessary for the conclusion or performance of a contract that a data subject is a party to; or
233:
Organisations that process personal information must ensure they satisfy minimum security obligations.
261:
10 million and a jail sentence of up to 10 years. In July 2023, The
Information Regulator fined the
407:
258:
568:"SA's new privacy laws are in effect – companies that fail to comply can be fined up to R10m"
275:
147:
120:
624:
567:
227:
Organisations must appoint a responsible person who must ensure compliance to the PoPI Act.
172:
151:
115:
179:. The act was passed to regulate the right to privacy, as enshrined by section 14 of the
200:
The PoPI Act sets out several core obligations. Some of the key requirements include:
658:
366:
The
Information Regulator is an independent body created in response to the PoPI and
459:
319:
315:
176:
44:
142:
This article is about South
African privacy legislation. For the food, see
482:"Protection of Personal Information Act: Commencement of certain sections"
625:"The newly enacted Cybercrimes Act and what it means for South Africans"
542:"POPI and the transfer of personal information outside of South Africa"
499:"Protection of Personal Information Act: Commencement of section 58(2)"
432:
515:
143:
649:
367:
348:
386:, and will come into force on a date to be proclaimed in the
593:"Information regulator fines justice department R5 million"
460:"POPIA prior authorisation commencement date set for 2022"
230:
Cross-border transfers of personal data are restricted.
216:
it protects a legitimate interest of a data subject; or
171:) is a piece of legislation which governs the law of
263:
Department of
Justice and Constitutional Development
343:
326:
310:
302:
287:
282:
106:
98:
90:
80:
70:
62:
32:
18:
408:"Protection of Personal Information Act 4 of 2013"
433:"Welcome to Information Regulator South Africa"
257:Penalties under the Act include fines of up to
8:
268:
204:Personal information can only be processed:
19:Protection of Personal Information Act, 2013
274:
24:
183:, and would work in conjunction with the
207:with the consent of the data subject; or
399:
50:
267:
185:Promotion of Access to Information Act
161:Protection of Personal Information Act
15:
7:
14:
372:National Assembly of South Africa
139:South African privacy legislation
623:Williams, Grant (26 July 2021).
412:South African Government website
333:Adv. Pansy Tlakula, Chairperson
516:"Acts - Information Regulator"
314:JD House, 27 Stiemens Street,
146:. For the 1976 TV series, see
1:
458:Moyo, Admire (22 June 2021).
181:Constitution of South Africa
150:. For the Greek singer, see
691:
141:
85:Parliament of South Africa
34:Parliament of South Africa
665:South African legislation
650:The Information Regulator
384:President of South Africa
273:
213:it is required by law; or
189:President of South Africa
129:
111:
39:
23:
75:Republic of South Africa
336:Mosalanyane Mosala, CEO
520:Information Regulator
437:Information Regulator
362:Information Regulator
291:1 July 2020
269:Information Regulator
675:Privacy legislation
670:Data laws of Africa
270:
388:Government Gazette
71:Territorial extent
566:Ramalepe, Phumi.
546:Tonkin Clacey Inc
359:
358:
327:Agency executives
265:R5 million rand.
137:
136:
66:Act No. 4 of 2013
682:
637:
636:
634:
632:
620:
614:
613:
611:
603:
597:
596:
589:
583:
582:
580:
578:
572:Business Insider
563:
557:
556:
554:
552:
538:
532:
531:
529:
527:
512:
506:
505:
503:
495:
489:
488:
486:
478:
472:
471:
469:
467:
455:
449:
448:
446:
444:
439:. 20 August 2020
429:
423:
422:
420:
418:
404:
355:
352:
350:
298:
296:
278:
271:
196:Core Obligations
148:Popi (TV series)
121:right to privacy
94:19 November 2013
91:Assented to
28:
16:
690:
689:
685:
684:
683:
681:
680:
679:
655:
654:
646:
641:
640:
630:
628:
622:
621:
617:
609:
605:
604:
600:
591:
590:
586:
576:
574:
565:
564:
560:
550:
548:
540:
539:
535:
525:
523:
514:
513:
509:
501:
497:
496:
492:
484:
480:
479:
475:
465:
463:
457:
456:
452:
442:
440:
431:
430:
426:
416:
414:
406:
405:
401:
396:
380:
378:Cybercrimes Act
364:
347:
339:
294:
292:
283:Agency overview
255:
247:
198:
175:and privacy in
173:data protection
155:
152:Popi Malliotaki
140:
125:
116:data protection
81:Enacted by
58:
55:
49:
48:
12:
11:
5:
688:
686:
678:
677:
672:
667:
657:
656:
653:
652:
645:
644:External links
642:
639:
638:
615:
598:
584:
558:
533:
522:. 3 March 2022
507:
490:
473:
450:
424:
398:
397:
395:
392:
379:
376:
363:
360:
357:
356:
345:
341:
340:
338:
337:
334:
330:
328:
324:
323:
312:
308:
307:
304:
300:
299:
289:
285:
284:
280:
279:
254:
251:
246:
243:
242:
241:
237:
234:
231:
228:
225:
222:
221:
220:
217:
214:
211:
208:
197:
194:
138:
135:
134:
127:
126:
124:
123:
118:
112:
109:
108:
104:
103:
100:
96:
95:
92:
88:
87:
82:
78:
77:
72:
68:
67:
64:
60:
59:
57:
56:
52:
42:
41:
40:
37:
36:
30:
29:
21:
20:
13:
10:
9:
6:
4:
3:
2:
687:
676:
673:
671:
668:
666:
663:
662:
660:
651:
648:
647:
643:
626:
619:
616:
608:
602:
599:
594:
588:
585:
573:
569:
562:
559:
547:
543:
537:
534:
521:
517:
511:
508:
500:
494:
491:
483:
477:
474:
461:
454:
451:
438:
434:
428:
425:
413:
409:
403:
400:
393:
391:
389:
385:
377:
375:
373:
369:
361:
354:
349:inforegulator
346:
342:
335:
332:
331:
329:
325:
321:
317:
313:
309:
305:
301:
290:
286:
281:
277:
272:
266:
264:
260:
252:
250:
244:
238:
235:
232:
229:
226:
223:
218:
215:
212:
209:
206:
205:
203:
202:
201:
195:
193:
190:
186:
182:
178:
174:
170:
166:
162:
157:
153:
149:
145:
132:
128:
122:
119:
117:
114:
113:
110:
105:
101:
97:
93:
89:
86:
83:
79:
76:
73:
69:
65:
61:
51:
47:
46:
38:
35:
31:
27:
22:
17:
629:. Retrieved
618:
601:
587:
575:. Retrieved
571:
561:
549:. Retrieved
545:
536:
524:. Retrieved
519:
510:
493:
476:
464:. Retrieved
453:
441:. Retrieved
436:
427:
415:. Retrieved
411:
402:
381:
365:
320:Johannesburg
316:Braamfontein
311:Headquarters
306:South Africa
303:Jurisdiction
256:
248:
245:Jurisdiction
240:information.
199:
177:South Africa
168:
164:
160:
158:
156:
130:
43:
102:1 July 2020
659:Categories
394:References
295:2020-07-01
45:Long title
627:. Golegal
253:Penalties
99:Commenced
169:PoPI Act
133:In force
107:Keywords
63:Citation
462:. ITweb
344:Website
293: (
167:or the
131:Status:
322:, 2001
288:Formed
187:. The
144:Popiah
631:4 May
610:(PDF)
577:4 May
551:4 May
526:4 May
502:(PDF)
485:(PDF)
466:4 May
443:4 May
417:4 May
165:PoPIA
633:2022
579:2022
553:2022
528:2022
468:2022
445:2022
419:2022
368:PAIA
351:.org
159:The
353:.za
661::
570:.
544:.
518:.
435:.
410:.
374:.
318:,
635:.
612:.
595:.
581:.
555:.
530:.
504:.
487:.
470:.
447:.
421:.
297:)
259:R
163:(
154:.
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
