Protecting Health Information: Strengthening Safeguards Under the POPIA Health Regulations, 2026
The Protection of Personal Information Act, 2013 (“POPIA”), in regulating an additional and more protected category of personal information, generally prohibits the processing of special personal information, namely information concerning the religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life or biometric information of a data subject.1 However, POPIA also provides for a range of exceptions to this prohibition.
Pertinent to the topic at hand, on 6 March 2026, the Information Regulator published specific regulations,2 under POPIA, relating to the Processing of Data Subjects’ Health Information by Certain Responsible Parties, 2026 (the “Regulations”) in Government Gazette No. 54268. This took effect from the date it was published, 6 March 2026.