Information Regulator gives update on POPIA & PAIA matters

by P.Sergeant | Nov 14, 2025

The Information Regulator held a media briefing on 13 November 2025 to outline the latest developments in POPIA and PAIA enforcement, ongoing litigation, regulatory priorities. The briefing, led by Chairperson Adv Pansy Tlakula, came at a fitting moment as South Africa marks 25 years of PAIA - a reminder of the country’s long-standing commitment to transparency and accountability. 1. Major Litigation Matters DBE Matric Results Case The Regulator previously instructed the Department of Basic...

Data Processing Agreements: Your Essential Guide.

by see-wpdev | Apr 3, 2024

At the core of POPIA's principles lies a fundamental distinction between two essential entities: The Responsible Party and an Operator. This distinction clearly outlines each party's roles, obligations, and responsibilities in upholding data protection standards and safeguarding individuals' privacy rights. The Responsible Party (usually a public or private business) will set out the purpose of the processing activity, and the Operator (sub-contractors, agents, suppliers,...

May A Data Subject Institute A Claim For Damages Against A Responsible Party For Not Complying With POPI?

by see-wpdev | Mar 16, 2023

Yes, a data subject may institute a civil action for damages in a court having jurisdiction against a responsible party for any breach of any provision of the Act as referred to in Section 73 of POPI, whether or not there is intent or negligence by the responsible party. It is, therefore, a no-fault liability unless the responsible party can prove that the breach was vis major, the data subject consented to the breach, the data subject was at fault, compliance was not reasonably practicable in...

Guidelines When Using WhatsApp Groups For Business Communication Purposes.

by see-wpdev | Mar 7, 2023

Using WhatsApp groups for internal workplace communication and marketing purposes has become very popular. Employers should therefore keep in mind that compliance with the Protection of Personal Information Act (POPIA) must be adhered to when processing personal information on this platform. Things to keep in mind when using WhatsApp as a communication platform: Multiple devices are used for processing information, which information is also stored on each device, such as the employee’s phone...

DYK – Your Business Needs To Have A Privacy Notice?

by see-wpdev | Mar 6, 2023

Section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA), it states that if personal information is collected, the responsible party (The Business) must take practicable steps to ensure that the data subject is aware of specific points. These include: The type of information being collected;The name and address of the business;The purpose for which the information is collected;Is the supply of information voluntary or mandatory;The consequences of failing to provide...

When Do I Not Need Consent To “Use” Or Process Personal Information In Terms Of POPIA?

by see-wpdev | Feb 21, 2023

Since The Protection of Personal Information Act (POPIA) came fully into force on 1 July 2020, businesses are coming to grasp the many requirements of being POPIA compliant. One question that seems to predominantly be on everyone’s mind when personal information is used is: “Did a person/business have consent to use personal information?”, or, “Where did you get consent to use my personal information?” Although important, this question seems to be the default point of reference when dealing...

Episode 150: Has your business done its personal information impact assessment?

by see-wpdev | Feb 15, 2023

SEESA Consumer Protection & POPI Legal Advisors Viantha Govender and Shanay Reddy discuss the duty of an Information Officer within a business to complete a Personal Information Impact Assessment to identify and minimise the data protection risks from processing personal information within the business in terms of the POPI Act. Click on the play button below to listen to our podcast! Should you require additional information regarding the Protection of Personal Information Act, please...

Are You Entitled To Return Goods If You Have A Change Of Heart?

by see-wpdev | Feb 9, 2023

The Consumer Protection Act allows a consumer to return goods in four instances. For example, with direct marketing or, as we refer to, the "cooling-off period", which allows a consumer to return and get a refund on the goods they purchased after a period of five (5) days. Consumers are also allowed to return goods when the purchased items have not been seen before the purchase when the purchased items do not meet the intended purpose, and lastly, for defective goods in the case of an implied...

Access to Personal Information in the Public Domain

by see-wpdev | Feb 3, 2023

The Protection of Personal Information Act, 4 of 2013 (The POPI Act) protects an individual’s personal information. The POPI Act also ensures that the right to privacy in terms of the Constitution is upheld. It is important to remember that processing personal information is only applicable when a responsible party processes it. Any processing for personal or household activity is excluded from the POPI Act as stated by Section 6(1)(a). With personal information in the public domain, people...

DYK – In Terms Of Any Transaction, To Whom Does The Consumer Protection Act Not Apply?

by see-wpdev | Jan 30, 2023

In terms of goods or services which are promoted or supplied to the state; In terms of which, a consumer is a juristic person whose asset value or annual turnover, at the time of the transaction, equals or exceeds the threshold value determined by the Minister (R2 million);If the transaction falls within an exception granted by the Minister;That makes up a credit agreement under the National Credit Act, but the goods or services that are the subject of the credit agreement are not excluded...

Consumer Protection & POPI

Information Regulator gives update on POPIA & PAIA matters

Data Processing Agreements: Your Essential Guide.

May A Data Subject Institute A Claim For Damages Against A Responsible Party For Not Complying With POPI?

Guidelines When Using WhatsApp Groups For Business Communication Purposes.

DYK – Your Business Needs To Have A Privacy Notice?

When Do I Not Need Consent To “Use” Or Process Personal Information In Terms Of POPIA?

Episode 150: Has your business done its personal information impact assessment?

Are You Entitled To Return Goods If You Have A Change Of Heart?

Access to Personal Information in the Public Domain

DYK – In Terms Of Any Transaction, To Whom Does The Consumer Protection Act Not Apply?

Recent Posts

Categories