Share on LinkedInShare on LinkedIn

ARTICLE · 07 APRIL 2026

Health Data Under The Microscope: New POPIA Regulations

The Protection of Personal Information Act, 2013 (“POPIA”), in regulating an additional and more protected category of personal information, generally prohibits the processing of special personal information...

South AfricaEmployment and HR

Protecting Health Information: Strengthening Safeguards Under the POPIA Health Regulations, 2026

The Protection of Personal Information Act, 2013 (“POPIA”), in regulating an additional and more protected category of personal information, generally prohibits the processing of special personal information, namely information concerning the religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life or biometric information of a data subject.1 However, POPIA also provides for a range of exceptions to this prohibition.

Pertinent to the topic at hand, on 6 March 2026, the Information Regulator published specific regulations,2 under POPIA, relating to the Processing of Data Subjects’ Health Information by Certain Responsible Parties, 2026 (the “Regulations”) in Government Gazette No. 54268. This took effect from the date it was published, 6 March 2026.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from