Yes, a data subject may institute a civil action for damages in a court having jurisdiction against a responsible party for any breach of any provision of the Act as referred to in Section 73 of POPI, whether or not there is intent or negligence by the responsible party. It is, therefore, a no-fault liability unless the responsible party can prove that the breach was vis major, the data subject consented to the breach, the data subject was at fault, compliance was not reasonably practicable in...






