POPIA
Also known as: POPI Act, Protection of Personal Information Act, Act 4 of 2013, South Africa POPIA 2013
Protection of Personal Information Act 4 of 2013 — Information Regulator (South Africa)
Official site Official change log
South Africa's general data protection statute. It sets eight conditions for the lawful processing of personal information by public and private bodies, requires prior authorisation for certain high-risk processing, obliges responsible parties to notify the Regulator and data subjects of security compromises, and establishes the Information Regulator, which issues guidance notes, approves codes of conduct and serves enforcement notices.
Timeline
August 2026
POPIA Low New document
POPIA Rules of Procedure specifications releasedThe Information Regulator has released specifications for the POPIA Rules of Procedure, establishing detailed procedural guidelines for data protection compliance and enforcement in South Africa. These …
Monitoring
Watched by 1 official source. Watching since 20 September 2026.