⁦POPIA⁩

⁦South Africa⁩ الخصوصية

الحالة

⁦In force (fully effective 1 July 2021); amended POPIA Regulations effective 17 April 2025.⁩

على من ينطبق

⁦Personal information of living individuals AND existing companies/juristic persons. Covers parties domiciled in South Africa, or not domiciled there but using processing means in South Africa (other than mere transit).⁩✓المصادر: ⁦gov.za⁩, ⁦dlapiperdataprotection.com⁩

حدود الحجم

⁦No size threshold. Prior authorisation from the Regulator is needed for certain processing (e.g., credit reporting, some unique identifiers, special/children⁩'⁦s data sent to non-adequate countries).⁩✓المصادر: ⁦gov.za⁩, ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩

الجهة الرقابية

⁦Information Regulator (South Africa)⁩✓المصادر: ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩

الإبلاغ عن الخروقات أو الحوادث

⁦Notify the Information Regulator and affected people as soon as reasonably possible after discovering a security compromise (s22). Since 1 April 2025, reports must go through the Regulator⁩'⁦s e-Portal.⁩✓المصادر: ⁦gov.za⁩, ⁦inforegulator.org.za⁩, ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩

مهلة الرد على طلبات البيانات الشخصية

⁦Access requests are handled under PAIA: private bodies must decide within 30 days of receipt (s56), extendable once by up to 30 days (s57).⁩✓المصادر: ⁦acts.co.za⁩, ⁦inforegulator.org.za⁩

مسؤول حماية البيانات

⁦Every organisation has an Information Officer (by default the head) who must be registered with the Regulator before taking up duties; deputies may be designated.⁩✓المصادر: ⁦gov.za⁩, ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩

الممثل المحلي

⁦No separate local representative requirement found.⁩✓المصادر: ⁦gov.za⁩, ⁦dlapiperdataprotection.com⁩

نقل البيانات إلى الخارج

⁦Allowed if the recipient is bound by substantially similar protection (law, BCRs or agreement), the person consents, the transfer is needed for a contract, or it benefits the person.⁩✓المصادر: ⁦lawlibrary.org.za⁩, ⁦dlapiperdataprotection.com⁩

ملفات تعريف الارتباط والموافقة

⁦Unsolicited electronic direct marketing needs opt-in consent, except to existing customers for similar products with an opt-out. Ask for consent only once. Opt-out is not valid consent (2025 regs). Calls count as electronic.⁩✓المصادر: ⁦gov.za⁩, ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩, ⁦cliffedekkerhofmeyr.com⁩

أقصى عقوبة

⁦Administrative fine up to ZAR 10 million; up to 10 years⁩' ⁦imprisonment for certain offences; civil damages claims also possible.⁩✓المصادر: ⁦inforegulator.org.za⁩, ⁦dlapiperdataprotection.com⁩, ⁦michalsons.com⁩

المعلومات الموسومة بعبارة «قيد التحقق» لا تزال قيد التأكيد ولا تُقدَّم كإجابات.

ما يجب عليك فعله✓

• ⁦Register your Information Officer (and any deputies) on the Regulator⁩'⁦s portal.⁩
• ⁦Report security compromises via the Information Regulator e-Portal as soon as reasonably possible.⁩
• ⁦Get opt-in consent before electronic direct marketing to non-customers; remember opt-out is not consent.⁩
• ⁦Record or log telephone requests for deletion or objection so they can be retrieved.⁩
• ⁦Get prior Regulator authorisation before high-risk processing such as credit reporting.⁩
• ⁦Decide access requests within 30 days.⁩

التغييرات الأخيرة

⁦E-Portal breach reporting mandatory from 1 April 2025; amended POPIA Regulations effective 17 April 2025 (new forms, opt-out not valid consent, telephone requests must be recorded). Health information regulations for insurers, medical schemes, pension funds and employers gazetted and in force 6 March 2026 (GG 54268).⁩✓

المصادر

• المصدر الأساسي: ⁦https://inforegulator.org.za/⁩
• المصدر الثاني: ⁦https://www.cliffedekkerhofmeyr.com/news/publications/2025/Sectors/Technology-Communications/Technology-and-Communications-Alert-21-May-Important-POPIA-amendments-to-note⁩
• الجهة الرقابية: ⁦Information Regulator (South Africa)⁩

✓ = مؤكَّد من مصدرين مستقلين، أحدهما على الأقل رسمي. كيف نتحقق

معلومات فقط، وليست استشارة قانونية. القوانين تتغير؛ تحقّق مع الجهة الرقابية أو محامٍ مؤهل قبل الاعتماد على هذه الصفحة. هل لاحظت خطأ؟ راسلنا على ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.