27/08/2025
π¨ POPIA (Act No. 4 of 2013) β 20 Things You Should Know! βοΈ
South Africaβs Protection of Personal Information Act is here to keep YOUR info safe. Hereβs the breakdown π
1οΈβ£ Purpose: Protects personal info + balances privacy with free flow of data.
2οΈβ£ Scope: Applies to all public & private bodies in SA.
3οΈβ£ Extraterritorial Reach: Even affects companies outside SA if they process info here.
4οΈβ£ Personal Info Defined: Anything about an identifiable person or legal entity (names, IDs, bank details, etc.).
5οΈβ£ Special Personal Info: Religion, health, biometrics, race, politics = stricter rules!
6οΈβ£ Your Rights: You can ask what info is held about you.
7οΈβ£ Correction Rights: You can demand errors be fixed.
8οΈβ£ Lawful Processing: Info must be collected fairly & transparently.
9οΈβ£ Consent: No consent = no data use. Simple.
π Collection Limitation: Data should come directly from YOU (unless exceptions apply).
1οΈβ£1οΈβ£ Purpose Specification: Collected only for clear, lawful reasons.
1οΈβ£2οΈβ£ Further Processing Limits: Canβt use your info for sneaky side purposes.
1οΈβ£3οΈβ£ Information Quality: Must be accurate, complete & updated.
1οΈβ£4οΈβ£ Openness: You must be informed why & how your data is collected.
1οΈβ£5οΈβ£ Security Safeguards: Companies must keep your info safe from breaches.
1οΈβ£6οΈβ£ Breach Notifications: If hacked, YOU + the Regulator must be told.
1οΈβ£7οΈβ£ Information Regulator: Independent authority to enforce POPIA.
1οΈβ£8οΈβ£ Cross-border Transfers: Info only sent overseas if protected.
1οΈβ£9οΈβ£ Direct Marketing: Businesses need your OPT-IN consent first.
2οΈβ£0οΈβ£ Penalties: Break the law = fines up to R10 million π° or jail time up to 10 years βοΈ.
β‘ Bottom Line: POPIA = YOUR privacy, YOUR control. Businesses better respect it!
π¬ Do you think SA businesses are following these rules properly?