The Protection of Personal Information Act (POPIA) is a South African data privacy law that regulates how personal information is collected, used, stored, retained, destroyed, and generally processed. It is intended to promote the right to privacy in the Constitution, while at the same time protecting the flow of information and advancing the right of access to and protection of information.
POPIA establishes the rights and duties that are designed to safeguard personal data.
Companies are required to carefully manage the data capture and storage process of Personal Information within the lawful framework as set out in the Act.