The Protection of Personal Information Act (POPIA), which is the data privacy law of South Africa , came into force on 1 July 2021.

The law applies to websites, organizations, and all legal entities located in South Africa who process personal information.  

The POPIA requires obtaining the prior consent of end users before any processing of their personal information.

The commencement date is 1 July 2020 and it will be enforced from that date.