הסכמה לעוגיות ב South Africa

South Africa's POPIA became fully enforceable in July 2021 and is overseen by the Information Regulator. It is built around eight conditions for lawful processing and applies to both natural and, unusually, juristic persons, meaning companies as data subjects, which is broader than most regimes. Consent is one lawful basis among several, and direct marketing by electronic means generally requires opt-in consent. Penalties include administrative fines up to 10 million rand and possible imprisonment. Organisations must appoint an information officer and may need to register them. Notices are commonly in English. Cookies that identify users are personal information subject to POPIA.