Página traducida y verificada automáticamente. Prevalece la versión en inglés. Algunas partes siguen en inglés mientras se verifica su traducción. Ver en inglés · Informar un error de traducción
POPIA
Ley de Protección de la Información Personal (Sudáfrica)
Ley integral de privacidad de Sudáfrica, basada en ocho condiciones para el tratamiento lícito.
The law in brief
South Africa's Protection of Personal Information Act (POPIA) sets eight conditions for the lawful processing of personal information. It has applied in full since 1 July 2021 and is enforced by the Information Regulator, which has become more active, including with fines and enforcement notices.
It protects the personal information of both natural persons and existing juristic persons such as companies, which sets it apart from most privacy laws.
A quién se aplica
- Responsible parties processing personal information entered into a record, where the responsible party is domiciled in South Africa, or is not but uses means in South Africa to process it.
- Operators processing personal information for a responsible party under contract.
- Personal information relates to identifiable living natural persons and, where applicable, identifiable existing juristic persons.
What it requires
Eight conditions for lawful processing
Meet accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation.
An information officer
The head of a private body is its information officer by default, and must be registered with the Information Regulator before taking up duties; deputies may be designated.
Security compromises
Notify the Information Regulator and the data subject as soon as reasonably possible after discovering that personal information has been accessed or acquired by an unauthorized person.
Direct marketing consent
Direct marketing by electronic communication requires the data subject's consent, unless they are an existing customer and marketing concerns similar products and services with an opt-out each time.
Transferencias transfronterizas
Transfer personal information outside South Africa only where the recipient is subject to adequate protection, the data subject consents, or another listed ground applies.
Derechos de las personas
Data subjects can be notified of collection and of security compromises, access their information, request correction or deletion, object to processing, refuse direct marketing by electronic communication unless they consented, not be subject to certain automated decisions, and complain to the Information Regulator.
Enforcement and penalties
Multas administrativas de hasta R10 millones y sanciones penales, incluidas multas y prisión, por ciertos delitos. Los titulares de los datos pueden presentar acciones civiles por daños.
What to do first
- Register your information officer with the Information Regulator and appoint deputies as needed.
- Map processing against the eight conditions, especially purpose specification and minimality.
- Fix direct marketing: electronic marketing to non-customers needs opt-in consent.
- Report security compromises to the Regulator through its portal and notify data subjects.
- Check prior authorization requirements and cross-border transfers.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
Novedades recientes
Aún no hay nada que informar. Regulatory Watch enumera las nuevas normas, medidas de cumplimiento y decisiones judiciales a medida que llegan.
Fuentes
- Ley de Protección de la Información Personal 4 de 2013 Regulador de la Información · Texto oficial o regulador
Biblioteca de regulaciones
Todas las leyes estatales de privacidad de EE. UU., en un mapa
24 estados tienen una ley integral de privacidad en la biblioteca, junto con las leyes de la UE, del Reino Unido, federales de EE. UU. y globales: 102 en total, cada una explicada en palabras sencillas con sus fuentes. Seleccione un estado para ver qué se aplica allí.
- En vigor
- Entrada en vigor
- Leyes sectoriales