POPIA compliance with ConsentX
Protection of Personal Information Act
South Africa
In force since 2021
Asia & Africa
Who it applies to
Any party (responsible party) processing personal information in South Africa.
Penalties
Fines up to R10 million and, in serious cases, imprisonment.
Key obligations
- Process only with a lawful basis
- Obtain consent where required
- Limit processing to the purpose
- Honor data subject participation rights
- Notify the regulator of breaches
How ConsentX helps
Lawful-basis consent capture
Purpose-limited categories
Data subject request intake
Evidence and reporting
Get POPIA ready with ConsentX
Start free, or book a walkthrough with our team.
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.
Frequently asked questions
What is POPIA?+
South Africa's data protection law sets conditions for lawful processing of personal information, including consent and purpose limitation.
Who enforces POPIA?+
The Information Regulator of South Africa enforces POPIA, with fines up to R10 million for serious violations.