Home / Solutions / South Africa’s POPIA

South Africa’s Protection of Personal Information Act (POPIA)

The majority of the remaining sections of South Africa’s Protection of Personal Information Act (POPIA) came into effect July 1, 2020, beginning a 12-month transition period for organizations to become POPIA-compliant before all sections come into force.

Although POPIA shares similarities with the GDPR, POPIA establishes new requirements for the processing of personal information, data subject rights, and brings a new set of compliance challenges for organizations with operations in South Africa.

The transition period for South Africa’s POPIA ends on June 30, 2021 and enforcement begins on July 1, 2021.

Learn More About POPIA

How OneTrust Helps

POPIA Research and Readiness

Get Regulatory Updates and Assess Organizational Readiness

POPIA Consumer Rights Solutions

Automate the Fulfillment of Data Subject Rights Requests

POPIA Privacy Governance Solutions

Manage Internal Workflows, Tasks, and Reporting

POPIA Research and Readiness

Access Research and Guidance on South Africa’s POPIA

Access a centralized repository of resources that includes the full POPIA text, summaries, guides, and regulatory guidance. Stay up to date with the latest amendments, news, and developments.

Generate Your Data Protection & Security Readiness Report

Leverage industry-recognized readiness and planning reports to assess your organization’s gaps and remediation recommendations to minimize risks. Opt-in to share your readiness and benchmark your program against 300+ other organizations.

POPIA Consumer Rights Solution

Automate Intake and Fulfillment of Data Subject Requests (DSAR)

POPIA §§§§ 11, 18, 23, 24 (Condition 8)

Simplify request intake with POPIA web form templates and the drag-and-drop web form builder. Leverage POPIA-specific response workflows to help your organization respond to requests appropriately and reduce unnecessary work with built-in exception handling.

Track Verifiable Consent to Avoid Unauthorized Data Processing

POPIA §§§ 11, 27-33, 72

Comply with POPIA requirements for collection of consent and maintain a central consent database across web, mobile, online and offline consent collection points and pass consent data to email marketing tools, CRMs, and other downstream systems.

Centralize & Distribute Privacy Disclosures

POPIA §§§ 19, 20, 21

Adhere to POPIA notification requirements and easily update, centralize, and distribute policies, notices, and disclosures across web and mobile properties from a single platform. Update privacy notices to include data subject rights under POPIA and direct consumers to a data subject rights intake form.

POPIA Privacy Governance Solutions

Map Data Flows

POPIA §§§ 18, 57, 72

Track key attributes when mapping data for POPIA compliance, including international data transfers and transfers to third parties. Additionally, utilize bulk importing capabilities to attach POPIA-specific data elements to existing data.

Conduct Personal Information Impact Assessments

Regulation 4

Leverage PIIAs to assess the security of databases and international transfers. Take advantage of automated risk flagging and research-backed POPIA-specific remediation recommendations.

Prepare for Breaches with Assessment Templates

POPIA §§§ 20, 21, 22

Should a breach occur, analyze incidents with a pre-built POPIA Data Breach Notification assessment template that will collect the relevant information needed to notify the Supervisory Authority.

Streamline Breach Response and Align with Notification Requirements

POPIA §§§§ 19, 20, 21, 22

Utilize customizable workflows to streamline incident and breach response and store audit trails needed to comply with POPIA security requirements and notification obligations.

Prepare Your Privacy Program for the July 1, 2021 Deadline

Operationalize and automate POPIA requirements and accelerate time to compliance with OneTrust technology solutions.

South Africa’s Protection of Personal Information Act (POPIA)

How OneTrust Helps

POPIA Research and Readiness

POPIA Consumer Rights Solutions

POPIA Privacy Governance Solutions

POPIA Research and Readiness

Access Research and Guidance on South Africa’s POPIA

Generate Your Data Protection & Security Readiness Report

POPIA Consumer Rights Solution

Automate Intake and Fulfillment of Data Subject Requests (DSAR)

POPIA §§§§ 11, 18, 23, 24 (Condition 8)

Track Verifiable Consent to Avoid Unauthorized Data Processing

POPIA §§§ 11, 27-33, 72

Centralize & Distribute Privacy Disclosures

POPIA §§§ 19, 20, 21

POPIA Privacy Governance Solutions

Map Data Flows

POPIA §§§ 18, 57, 72

Conduct Personal Information Impact Assessments

Regulation 4

Prepare for Breaches with Assessment Templates

POPIA §§§ 20, 21, 22

Streamline Breach Response and Align with Notification Requirements

POPIA §§§§ 19, 20, 21, 22

Prepare Your Privacy Program for the July 1, 2021 Deadline

POPIA Resources

Blog

Get Ready for POPIA with OneTrust

Webinar

Know Your Laws: South Africa's POPIA

Report

Comparing privacy laws: GDPR v. POPIA