The Protection of Personal Information Act (POPI Act), Act No. 4 of 2013:

Is a South African law that aims to protect the privacy of individuals by regulating how their personal information is processed by both public and private bodies. It came into force on July 1, 2020, with a one-year grace period for compliance ending on June 30, 2021. The Act establishes the Information Regulator, who is responsible for ensuring compliance and handling complaints, and provides for rights regarding unsolicited electronic communications and automated decision-making.

Purpose of the Act:

To promote the protection of personal information processed by public and private bodies, and to establish minimum requirements for processing

Information Regulator:

The Act establishes the Information Regulator, who has the power to enforce compliance, handle complaints, and perform research.

Data Subject Rights:

Individuals have rights regarding their personal information, including the right to object to processing, withdraw consent, and access their information.

Compliance:

Public and private bodies are expected to ensure their processing of personal information complies with the Act within a specified timeframe.