Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 27 JULY 2021

Market Intelligence Thought Leadership Award Winner

Protection Of Personal Information Act – Compliance Over Complacency

Adams & Adams
Adams & Adams
Contributor
Adams & Adams

Adams & Adams

Who we are: Established in 1908, Adams & Adams is an internationally recognised and leading African...

View firm profile
Explore more from Adams & Adams

Many organisations have embarked on a journey to ensure that they are compliant with the Protection of Personal Information Act (POPIA), which became enforceable on 1 July 2021.

South AfricaPrivacy
Danie Strachan
Danie Strachan
Author LinkedIn connections

Protection of Personal Information Act – Compliance over Complacency

Many organisations have embarked on a journey to ensure that they are compliant with the Protection of Personal Information Act (POPIA), which became enforceable on 1 July 2021. With the deadline already past, it is crucial that companies have good data management practices and processes in place.

Does it all purely come down to consent?

There is a misconception that personal information cannot be processed without consent. POPIA requires that personal information may only be processed in a lawful and reasonable manner. The processing must be adequate, relevant, and not excessive. But POPIA does not state that personal information can only be processed with consent. POPIA sets out other grounds on which information can be processed. Consent is just one of the conditions you can rely on to ensure you are obtaining and processing the information lawfully. For example, personal information can

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

ID Like To Know: Unique Identifiers Under POPIA

When organisations assign unique identifiers like account numbers or reference codes to individuals, do these identifiers fall outside data protection laws? A recent South African court case challenges conventional assumptions about what constitutes personal information under POPIA, raising critical questions about pseudonymisation, identifiability standards, and compliance obligations that every organisation processing such data must understand.
South AfricaPrivacy
ENS
ENS
Article

AI-assisted Cyberattacks: When Does POPIA Require Notification?

As artificial intelligence accelerates the speed, scale and sophistication of cyberattacks in South Africa, organisations face critical questions about their legal obligations under POPIA. This analysis examines whether existing cybersecurity programmes remain legally adequate when threats evolve, and clarifies the precise circumstances under which AI-assisted security compromises must be reported to regulators and affected individuals.
South AfricaPrivacy
ENS
ENS
Article

Frozen Accounts And Fraudulent Funds: Navigating The Rights Of Banks, Customers And SARS

A South African High Court has ruled on the lawfulness of account freezing by banks based on fraud suspicions and affirmed SARS's authority to issue third-party notices under section 179 of the Tax Administration Act. The case arose after a close corporation fraudulently claimed a VAT refund of R3.28 million, transferred R900,000 to an individual's account, prompting the bank to freeze the account and SARS to pursue recovery through a third-party notice.
South AfricaTax
Adams & Adams
Adams & Adams
Article

Nigeria Clarifies Copyright Ownership Of Musical Works

A Nigerian Federal High Court has ruled on a high-stakes copyright dispute over the globally acclaimed gospel song "Way Maker," examining whether a music producer's technical contributions to a recording constitute co-authorship. The judgment clarifies the critical distinction between creative authorship and production services in determining copyright ownership. This decision carries significant implications for how the music industry documents and allocates rights between artists and technical contributor
NigeriaIntellectual Property
Adams & Adams
Adams & Adams
Article

Constitutional Court Delivers Landmark But Incomplete Copyright Ruling. Parliament Must Now Seize The Opportunity To Modernise South Africa’s Copyright Law For The AI Era

South Africa's Constitutional Court has delivered a landmark ruling on the Copyright Amendment Bill, upholding the controversial shift to 'fair use' while striking down broad educational exceptions for textbook copying. The judgment leaves critical questions unresolved about contract terms, ministerial powers, and the Bill's complete silence on generative AI—creating both constraints and opportunities as Parliament must now revisit legislation conceived over a decade ago.
South AfricaIntellectual Property
Adams & Adams
Adams & Adams
Article

Tanzania Strengthens IP Protection Through Legislative Reforms

Tanzania has enacted sweeping reforms to its intellectual property framework through the Written Laws (Miscellaneous Amendments) Act, 2026, formally recognizing ARIPO registrations and introducing protection for collective marks, certification marks, and well-known trade marks. The amendments provide retrospective recognition of ARIPO trade mark, patent and design registrations dating back to 1999, while expanding the scope of registrable marks to include non-traditional forms such as 3D marks, colours, and
TanzaniaIntellectual Property
Adams & Adams
Adams & Adams