South Africa: Implementation of Protection of Personal Information Act (POPIA) after grace period

The operative provisions of the Protection of Personal Information Act (2013) including a new data protection regime come into effect after a one-year grace period following proclamation No. R21 in 2019. The Act introduces the rights to rectify, delete and access personal data and establishes rules for storing and transferring in other countries of personal data. Further, the Act specifies the limitations to processing certain categories of personal data. Finally, the Act establishes the "Information Regulator" as the supervisor body that should advise and monitor on data protection matters and enforce the prescriptions of the Act.