Overview
POPIA, enacted by the South African Parliament, aims to protect personal data by setting conditions for its lawful processing, including accountability, security safeguards, openness, and data subject participation. It also addresses special categories of personal data, processing of children's data, and transborder information flows. The Act establishes an Information Regulator with supervisory and enforcement powers and outlines rights for individuals, including those related to access, correction, and objection. Effective as of July 2020, POPIA includes provisions for administrative fines, civil remedies, and penalties for non-compliance.