On April 7, 2025, the South African Information Regulator introduced a crucial requirement mandating organizations to report data breaches via an online eServices Portal. This change reflects a procedural shift in compliance with the Protection of Personal Information Act (POPIA), aligning South Africa with global practices for breach reporting. Companies processing personal data in South Africa, regardless of headquarters, must understand their compliance obligations under POPIA, particularly foreign entities utilizing South African resources, which necessitates a review of their potential exposure to the Act's regulations.
On April 7, 2025, South Africa's Information Regulator announced a new requirement for organizations to report data breaches via an online eServices Portal.
This development highlights the importance of understanding when and how POPIA may apply for companies processing personal information in South Africa.
Collection
[
|
...
]