Commencement of the Protection of Personal Information Act – 1 April 2020
The waiting game is over for POPI Act
In a January 2020 interview, the Chairperson of the Information Regulator, Pansy Tlakula, indicated that her office has requested President Ramaphosa to sign the remaining provisions of POPI into full force by 1 April 2020.
These provisions will establish the minimum requirements for lawful processing of personal information with which all private and public persons must comply, as well as the Information Regulator’s enforcement powers.
It is not certain that President Ramaphosa will sign POPI into full force by 1 April 2020, or at all this year. His office has not made any public announcements to indicate their intentions in this regard. The Information Regulator has recently been engaging with the President to increase her office’s budget to allow it to exercise its powers and duties under POPI which include monitoring and enforcing compliance, and presumably the commencement date depends on the outcome of these requests.
Once POPI comes into force, all public and private persons will have one year to comply with the provisions of POPI, and there can be substantive penalties for non-compliance.
Organisations should not underestimate how quickly the 12 months will pass because there is a lot to do.
