What is the Protection of Personal Information Act (POPIA)?
The Protection of Personal Information Act 4 of 2013 (POPIA) is the data protection legislation enacted in South Africa. POPIA gives constitutional rights to the right of privacy and access to information.

Who is affected by POPIA?

Examples of Personal information

Gender

Race

Contact Information

Criminal History

Medical Records

Biometric Data

Financial Records

Religious Beliefs

employment History

Trade Union Membership

Education
What is data processing?
Processing of information under the POPI act involves the activities of receiving, storing, modifying, transferring, using, or disposing of personal information.

Storing Information

Sending Information

Saving Information to external devices

Deleting Information

Editing Information

Transferring Information Between Devices
8 conditions of lawful processing


Failure to comply with the requirements of the POPI Act could result in:
Maximum penalties of a R10 million fine or imprisonment for a period not exceeding 10 years or both for serious offences fine or imprisonment for a period not exceeding 12 months or both for less serious offences should the requirements of the POPI act not be adhered to.
For more details click here
