Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

South Africa: data, AI and cyber laws

Part of Middle East and Africa.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
In force
South Africa Cybercrimes ActCreates cybercrime offences such as unlawful access, interception, interference with data and systems, cyber fraud, extortion, and malicious communications including harmful intimate images. It also sets rules for search, seizure and cross-border cooperation. The duty for electronic communications service providers and financial institutions to report cybercrime (section 54) has not yet commenced.In effect since Dec 1, 2021
In force
South Africa POPIASouth Africa's comprehensive data protection law built on eight conditions for lawful processing, with Information Officer registration, security compromise notification to the Regulator and data subjects, and restrictions on direct marketing and cross-border transfers. Protects juristic persons as well as individuals.In effect since Jul 1, 2020

Past deadlines

Takes effectDec 1, 2021 · 4.9 years ago
South Africa Cybercrimes ActMost of the Act commencesCommenced by proclamation in Gazette 45562 of 30 November 2021, excluding Part VI of Chapter 2, some Chapter 4 sections and section 54.South Africa
EnforcementJul 1, 2021 · 5.3 years ago
South Africa POPIACompliance grace period endsResponsible parties must comply; Regulator enforcement begins (grace period ended 30 June 2021).South Africa
Takes effectJul 1, 2020 · 6.3 years ago
South Africa POPIAMain POPIA provisions commenceMost sections commence with a 12-month grace period.South Africa