The Information Regulator of South Africa has begun issuing administrative fines and enforcement notices to organisations that have failed to comply with the Protection of Personal Information Act (POPIA). This marks a significant shift from the Regulator’s initial awareness-raising approach to active enforcement.
What has happened?
Since POPIA’s enforcement date of 1 July 2021, the Information Regulator has received thousands of complaints from data subjects regarding unauthorised processing of personal information, unsolicited direct marketing and data breaches. The Regulator has now moved to formal enforcement action, issuing infringement notices and administrative fines to non-compliant organisations across multiple sectors including financial services, healthcare and retail.
What does this mean for your business?
Under POPIA, administrative fines can reach up to R10 million or imprisonment of up to 10 years for responsible parties found guilty of serious infringements. Even smaller violations can result in enforcement notices requiring immediate remediation.
The most common compliance failures the Regulator has identified include:
- No appointed Information Officer registered with the Information Regulator
- No Privacy Policy published on the business website
- Processing personal information without a lawful basis
- Failure to notify data subjects of data breaches within 72 hours
- No data processing agreements with third-party operators
What should you do?
South African businesses of all sizes are required to comply with POPIA. The key steps are:
- Appoint and register your Information Officer with the Information Regulator
- Publish a POPIA-compliant Privacy Policy on your website
- Complete a POPIA compliance assessment to identify gaps
- Implement corrective actions for any non-compliant areas
- Ensure all staff who handle personal information receive POPIA training
ComplyPath’s free POPIA assessment takes less than 10 minutes and generates your Privacy Policy and PAIA Manual automatically. Start your free assessment today.
Useful links:
