What is the POPI Act

The Protection of Personal Information Act is South Africa’s equivalent of the EU GDPR. It sets some conditions for responsible parties to lawfully process the personal information of data subjects. The POPI Act does not stop you from processing and does not require you to get consent from data subjects to process their personal information. Whoever decides why and how to process personal information is responsible for complying with the conditions. There are eight general conditions and three extra conditions. The responsible party is also responsible for a failure by their operators to meet the conditions.

Benefits of POPI ACT

More control over the data handled
Better understand its purposes
Better data management can increase the efficiency and effectiveness
Purging irrelevant data
Correct third-party consent provides clear responsibility in case of breach

Sections 1 - 60
Sections 61 - 115

POPIA Sections

Section 1	Section 7	Section 13	Section 19	Section 25	Section 31	Section 37	Section 43	Section 49	Section 55
Section 2	Section 8	Section 14	Section 20	Section 26	Section 32	Section 38	Section 44	Section 50	Section 56
Section 3	Section 9	Section 15	Section 21	Section 27	Section 33	Section 39	Section 45	Section 51	Section 57
Section 4	Section 10	Section 16	Section 22	Section 28	Section 34	Section 40	Section 46	Section 52	Section 58
Section 5	Section 11	Section 17	Section 23	Section 29	Section 35	Section 41	Section 47	Section 53	Section 59
Section 6	Section 12	Section 18	Section 24	Section 30	Section 36	Section 42	Section 48	Section 54	Section 60

POPIA Sections

Section 61	Section 67	Section 73	Section 79	Section 85	Section 91	Section 97	Section 103	Section 109	Section 115
Section 62	Section 68	Section 74	Section 80	Section 86	Section 92	Section 98	Section 104	Section 110
Section 63	Section 69	Section 75	Section 81	Section 87	Section 93	Section 99	Section 105	Section 111
Section 64	Section 70	Section 76	Section 82	Section 88	Section 94	Section 100	Section 106	Section 112
Section 65	Section 71	Section 77	Section 83	Section 89	Section 95	Section 101	Section 107	Section 113
Section 66	Section 72	Section 78	Section 84	Section 90	Section 96	Section 102	Section 108	Section 114

Ensuring your Privacy

The goal of the POPI Act is to protect data subjects from security breaches, theft, and discrimination. Each principle encourages responsibility, security, and consent. It also provides special protections for distinct categories of data as well as the data of children.

Learn more

Compliance + Enforcing = Results

The sections which will commence on 1 July 2020 are essential parts of the Act and comprise sections which pertain to the conditions for the lawful processing of personal information; the regulation of the processing of special personal information; Codes of Conduct issued by the Information Regulator; procedures for dealing with complaints; provisions regulating direct marketing by means of unsolicited electronic communication, and general enforcement of the Act.

Learn more

We provide Support Information to the Public

Our goal is to provide all the neccessary information and implications of the POPI act to the general public, while provide important updates and processes about the act and its implementation.

Protection of Personal Information isn't new in South Africa. The Protection of Personal Information Bill was around in 2009, which meant that the discussion had been going on for years before that.

The Information Regulator published the "Regulations relating to the Protection of Personal Information" in the Government Gazette on 14th December 2018 42110, RG 10897, GoN 1383

Regardless of the timing, in terms of Section 114 (1) of the Act, "All processing of personal information must within one year after the commencement of this section be made to conform to this Act".

Learn more

Steps to Protect yourself

Find out different ways of protecting yourself and your privacy while browsing online or social media platforms to ensure that your personal information or online information isn't tracked or fraudlulently used or manipulated.

Learn more

Non-Compliance Risk

The risks of non-compliance include reputational damage, fines and imprisonment, and paying out damages claims to data subjects.

Biggest Impact

The biggest impact is on organisations that process lots of personal information, especially special personal information, children’s information, and account numbers.

Contact Us

For more information or if you which to discuss a matter, feel free to contact us below