Data protection in South Africa
Data protection in South Africa is governed by POPIA (Protection of Personal Information Act). If you process personal information about customers, staff or suppliers — which is almost every business — you must handle it lawfully and for a clear purpose, keep it secure, and appoint an information officer where the law requires one.
What to do
- 1 Process personal data lawfully and for a clear purpose.
- 2 Get consent where required and keep data secure.
- 3 Appoint an information officer / register where the law requires.
Frequently asked questions
Which data-protection law applies in South Africa?
Data protection in South Africa is governed by POPIA (Protection of Personal Information Act).
More on South Africa
- Register a company — South Africa
- Company tax — South Africa
- VAT / sales tax — South Africa
- Hiring staff — South Africa
- Start a business — South Africa
- Tax clearance — South Africa
- Empowerment / B-BBEE — South Africa
- Licences & permits — South Africa
- Payroll & employee tax — South Africa
- Importing & customs — South Africa
- Annual returns — South Africa
- Full South Africa compliance guide
Data protection elsewhere in SADC
Want this handled, or tracked for you?
Use the free tools, or let NanoLeap take it off your plate.
Reviewed June 2026 from official sources. General information only — confirm with SARS or a registered professional.