Protection of Personal Information Act, 2013

The act came into force 1 July 2020, which commenced a one-year grace period during which all South African entities were expected to become compliant.

[6] Some of the key requirements include: The PoPI Act applies to all persons and organisations within the borders of South Africa, and extends to visitors and illegal immigrants.

[8] In July 2023, The Information Regulator fined the Department of Justice and Constitutional Development R5 million rand.

The Cybercrimes Act has been signed by the President of South Africa, and will come into force on a date to be proclaimed in the Government Gazette.

The period between assent and commencement will be spent developing operating procedures and other documented processes for the implementation of provisions of the Act.