When will POPI come into force?
The question of when the South African Protection of Personal Information Act, 2013 (“POPI”) will come into force has been asked many times since the Bill was signed into law by the president on 19 November 2013.
Advocate Pansy Tlakula, who was appointed as chairperson of the Information Regulator (the “Regulator”) in terms of POPI on 1 December 2016, stated in her “briefing on the work of the Information Regulator” on 13 February 2017, that the majority of the provisions of POPI “will only come into operation once the Regulator is fully operational”. The officials of the Justice Department who were responsible for drafting POPI informed the Regulator in December 2016 that, in their experience, the Regulator will only be up and running in two years’ time. Advocate Tlakula, however, expressed a commitment to shortening the implementation period of the Regulator.
The “Time Table of Activities” published on the Regulator’swebsitelists the first week of April 2018 as the anticipated date of publication of the final Regulations in the government gazette.
Therefore, it is fair to assume that the commencement date of POPI will be proclaimed between the first week of April 2018 and 1 December 2018.
A responsible party (ie, a public or private body or any other person, which, alone or in conjunction with others, determines the purpose of and means for processing personal information) will be given a one-year transition period after the commencement of POPI to comply with its provisions.
In our experience, the roll-out of a comprehensive POPI compliance programme takes six months to two years. It is therefore crucial for companies to start their POPI compliance programmes as soon as possible. For more information on how to comply with the provisions if POPI, please clickhereto find out more about ENSafrica’s upcoming information officer training.
banking and finance director [email protected] cell: +27 82 788 0827
technology, media and telecommunications director [email protected] cell: +27 83 345 1119
- The New UAE Pledge Law - Security Registration
- Philippine Chapter of Getting the Deal Through: Cybersecurity 2018
- The GDPR and the Data protection officer (DPO)
- HSR Update: Annual Jurisdictional Thresholds Revisions Effective February 28, 2018
WSG Member: Please login to add your comment.