Does POPIA protect companies as well as people?

Yes. Unusually, POPIA protects the personal information of both natural persons and juristic persons such as companies, which is broader than most data protection laws.

Is opt-in required for marketing in South Africa?

Yes. Direct marketing by electronic means under POPIA generally requires the prior opt-in consent of the data subject, with limited exceptions for existing customers.

Afrika Sub-Sahara

Persetujuan kuki di South Africa

Persetujuan dan undang-undang privasi di South Africa

South Africa's POPIA became fully enforceable in July 2021 and is overseen by the Information Regulator. It is built around eight conditions for lawful processing and applies to both natural and, unusually, juristic persons, meaning companies as data subjects, which is broader than most regimes. Consent is one lawful basis among several, and direct marketing by electronic means generally requires opt-in consent. Penalties include administrative fines up to 10 million rand and possible imprisonment. Organisations must appoint an information officer and may need to register them. Notices are commonly in English. Cookies that identify users are personal information subject to POPIA.

Pihak berkuasa

Information Regulator

Status

Protection of Personal Information Act fully enforceable since July 2021

Undang-undang utama

POPIA

Bahasa

English

Siapa yang wajib mematuhi

Any party (responsible party) processing personal information in South Africa.

Penalti

Administrative fines up to 10 million rand, plus possible imprisonment

Kewajipan utama

Process only with a lawful basis
Obtain consent where required
Limit processing to the purpose
Honor data subject participation rights
Notify the regulator of breaches

Panduan tempatan

Apply the eight POPIA conditions for lawful processing
Obtain opt-in consent for electronic direct marketing
Appoint and register an information officer
Remember POPIA covers companies as data subjects too

Bagaimana ConsentX membantu

Lawful-basis consent capture
Purpose-limited categories
Data subject request intake
Evidence and reporting

Mula secara percuma

yoursite.com

South Africa

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan South Africa dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi South Africa dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah South Africa.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki South Africa.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit South Africa.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.