South Africa’s Protection of Personal Information Act

South Africa’s Protection of Personal Information Act (POIPA) took effect on July 1, 2020. The Act applies to any company or organization processing personal information in South Africa, who is domiciled in the country, or not domiciled but making use of automated or non-automated means of processing in the country. The POIPA creates nine actionable rights for South African citizens (data subjects), including but not limited to the right to access, right to correction and right to deletion.

Enforcement

Enforcement began on July 1, 2021

  • Fines for non-compliance can range up to 10 million ZAR (South African rands).