Protection of Personal Information Act
South Africa's data protection law, fully in force since July 2021. It sets conditions for the lawful processing of personal information, grants data subjects rights over their data, and requires breach notification to the Information Regulator. It applies to any organization processing personal information in South Africa, with penalties including fines and imprisonment.