Protection of Personal Information Act (South Africa)- POPIA

The Protection of Personal Information Act 2013 (POPIA) is South Africa’s comprehensive data protection law regulating the processing of personal information by public and private bodies. POPIA establishes obligations relating to the collection, storage, use, disclosure, and protection of personal data while providing individuals with rights over their personal information. The Act introduces principles of lawful processing, consent, transparency, security safeguards, accountability, and cross-border transfer requirements. POPIA aligns South Africa’s privacy framework with global data protection standards, including principles reflected in the EU GDPR.