South African Cyber Law
POPIA Complaints and Enforcement
POPIA establishes the Information Regulator and provides mechanisms for complaints, investigations and enforcement.
The Information Regulator
POPIA establishes the Information Regulator as the statutory regulator for matters covered by the Act.
The Regulator has functions and powers under POPIA relating to monitoring, complaints, investigations and enforcement.
Making a complaint
Section 74 provides for complaints to the Information Regulator.
Before making a complaint, it is useful to organise the facts: what information was involved, who processed it, what happened, when it happened and what response you received.
Keep a paper trail
Save privacy notices, emails, data-access requests, responses, screenshots and relevant correspondence.
Record dates and identify the organisation or person responsible for the processing.
Do not send unnecessary copies of sensitive information when making a complaint.
Enforcement is context-specific
The available remedies and enforcement process depend on the facts and the applicable provisions of POPIA.
Cyber Conduct provides educational information and does not replace advice from the Information Regulator or a qualified legal professional.
Official source
Read the official legislation from the South African government:
Protection of Personal Information Act 4 of 2013 — South African Department of JusticeImportant
Cyber Conduct provides general educational information, not legal advice. South African legislation can change, and the application of the law depends on the facts of each situation. For a specific legal matter, consider obtaining advice from a qualified legal professional or the relevant authority.