Zansa › Answers › Privacy, security and ownership
What is POPIA and who must comply with it?
POPIA is South Africa's Protection of Personal Information Act. It sets conditions for lawfully processing personal information, and applies to responsible parties, meaning organisations that decide why and how personal information is processed, in most private and public bodies. This is general information, not legal advice.
POPIA covers information about identifiable people and, in South Africa, also identifiable juristic persons such as companies. Its conditions include accountability, purpose specification, minimal processing, security safeguards and openness.
The regulator is the Information Regulator. Small businesses are generally not exempt, so if you handle customer, staff or supplier information in South Africa, check your obligations with a qualified adviser. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call