POPIA (The Protection of Personal Information Act), is a law in South Africa that aims to protect people's personal information. It applies to anyone who collects, uses, or shares personal information, whether they are a person or a business. There are eight rules that must be followed to use personal information legally, such as getting
Yes. If a responsible party uses cookies for the purpose of direct marketing and the data subject is not a customer of the responsible party, the responsible party must obtain the data subject’s consent. It would be problematic for any website owner to obtain the consent of each and every visitor to its website and
Yes. POPI requires a responsible party to maintain a record of all the company’s processing operations (or activities or functions) under its responsibility in a PAIA manual.
Yes. If a company that is based in South Africa processes the data of EU/UK citizens and residents, it would be expected to comply with both the local legislation (POPI) as well as the GDPR. It is therefore very important that companies are aware of what both sets of legislation require from them.