تُرجمت هذه الصفحة وتم التحقق منها آليًا. النسخة الإنجليزية هي المرجع. بعض الأجزاء لا تزال بالإنجليزية ريثما يتم التحقق من ترجمتها. عرض بالإنجليزية · الإبلاغ عن خطأ في الترجمة
POPIA
Protection of Personal Information Act (جنوب أفريقيا)
قانون الخصوصية الشامل في جنوب أفريقيا، القائم على ثمانية شروط للمعالجة المشروعة.
The law in brief
South Africa's Protection of Personal Information Act (POPIA) sets eight conditions for the lawful processing of personal information. It has applied in full since 1 July 2021 and is enforced by the Information Regulator, which has become more active, including with fines and enforcement notices.
It protects the personal information of both natural persons and existing juristic persons such as companies, which sets it apart from most privacy laws.
على من يسري
- Responsible parties processing personal information entered into a record, where the responsible party is domiciled in South Africa, or is not but uses means in South Africa to process it.
- Operators processing personal information for a responsible party under contract.
- Personal information relates to identifiable living natural persons and, where applicable, identifiable existing juristic persons.
What it requires
Eight conditions for lawful processing
Meet accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation.
An information officer
The head of a private body is its information officer by default, and must be registered with the Information Regulator before taking up duties; deputies may be designated.
Security compromises
Notify the Information Regulator and the data subject as soon as reasonably possible after discovering that personal information has been accessed or acquired by an unauthorized person.
Direct marketing consent
Direct marketing by electronic communication requires the data subject's consent, unless they are an existing customer and marketing concerns similar products and services with an opt-out each time.
النقل عبر الحدود
Transfer personal information outside South Africa only where the recipient is subject to adequate protection, the data subject consents, or another listed ground applies.
حقوق الأفراد
Data subjects can be notified of collection and of security compromises, access their information, request correction or deletion, object to processing, refuse direct marketing by electronic communication unless they consented, not be subject to certain automated decisions, and complain to the Information Regulator.
Enforcement and penalties
غرامات إدارية تصل إلى R10 مليون، وعقوبات جنائية تشمل الغرامة والسجن عن جرائم معينة. ويجوز لأصحاب البيانات رفع دعاوى مدنية للمطالبة بالتعويض.
What to do first
- Register your information officer with the Information Regulator and appoint deputies as needed.
- Map processing against the eight conditions, especially purpose specification and minimality.
- Fix direct marketing: electronic marketing to non-customers needs opt-in consent.
- Report security compromises to the Regulator through its portal and notify data subjects.
- Check prior authorization requirements and cross-border transfers.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
المستجدات الأخيرة
لم يُبلَّغ عن شيء بعد. تعرض Regulatory Watch القواعد الجديدة وإجراءات الإنفاذ وأحكام المحاكم فور صدورها.
المصادر
- Protection of Personal Information Act رقم 4 لسنة 2013 هيئة تنظيم المعلومات · نص رسمي أو جهة تنظيمية
مكتبة التشريعات
جميع قوانين الخصوصية في الولايات الأمريكية على خريطة واحدة
لدى 24 ولاية قانون شامل للخصوصية في المكتبة، إلى جانب قوانين الاتحاد الأوروبي والمملكة المتحدة والقوانين الاتحادية الأمريكية والقوانين العالمية: 102 قانونًا إجمالًا، كل منها مشروح بلغة واضحة مع مصادره. اختر ولاية لمعرفة ما يسري فيها.
- ساري
- يدخل حيز التنفيذ
- القوانين القطاعية