POPIA
Quick Answer
What is POPIA?
POPIA is South Africa’s data protection law – rules for collecting, storing and using personal information.
POPIA explained
It applies to every business holding customer or employee data, with no size exemption. Fines reach R10 million; the Information Regulator enforces it.
Who it applies to: Every business with a customer list or staff records.
Cost: Compliance basics are cheap; breaches are not.
Related terms and guides
- What Is POPIA and Does It Apply to My Small Business?
- Business Legal Guide for South African Entrepreneurs
Official source: Information Regulator
Always verify this information with official South African government sources. Rules, fees and thresholds change. Check SARS, CIPC, the Department of Employment and Labour or gov.za before you act.
About BizAnswers: BizAnswers is a privately owned South African company – not a government department. Our guides are free to read and show you how to do things yourself through official channels. If you would rather have the paperwork handled for you, we assist individuals and businesses with filing their South African tax returns and staying compliant, which is a paid service, not a free government service. Contact us for help.
Last reviewed: September 2026 by the BizAnswers editorial team. How we write and check our guides.