South Africa POPIA
In force South Africa · In force Jul 1, 2020 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Jul 1, 2020 | Main POPIA provisions commence6.2 years ago | 6.2 years ago |
| Jul 1, 2021 | Compliance grace period ends5.2 years ago | 5.2 years ago |
Summaries for reference, not legal advice. Check the official text.
What it does
South Africa's comprehensive data protection law built on eight conditions for lawful processing, with Information Officer registration, security compromise notification to the Regulator and data subjects, and restrictions on direct marketing and cross-border transfers. Protects juristic persons as well as individuals.
- Who it applies to
- Responsible parties domiciled in South Africa, or not domiciled but using automated or non-automated means in South Africa.
- Penalties
- Administrative fines up to ZAR 10 million; criminal offences punishable by fines or imprisonment up to 10 years (e.g. obstruction, unlawful acts relating to account numbers).
- Enforced by
- Information Regulator (South Africa)
- Official name
- Protection of Personal Information Act, 2013 (Act No. 4 of 2013)
- Citation
- Act No. 4 of 2013
- Topics
- privacy, breach-notification
Verified 2026-09-22 inforegulator.org.za
Research notes
Amendments to the POPIA Regulations were reported as gazetted in April 2025 (including electronic breach reporting via the eServices portal); exact date not verified so omitted.
Related
Israel Privacy Protection Law Amendment 13
Kenya Data Protection Act
Nigeria NDPA
Saudi PDPL
UAE PDPLQuestions about South Africa POPIA
- What are the South Africa POPIA compliance deadlines?
- Jul 1, 2020: Main POPIA provisions commence. Jul 1, 2021: Compliance grace period ends.
- When does South Africa POPIA take effect?
- South Africa POPIA took effect on Jul 1, 2020.
- Who does South Africa POPIA apply to?
- Responsible parties domiciled in South Africa, or not domiciled but using automated or non-automated means in South Africa.
- What are the penalties under South Africa POPIA?
- Administrative fines up to ZAR 10 million; criminal offences punishable by fines or imprisonment up to 10 years (e.g. obstruction, unlawful acts relating to account numbers).