Justice on 100 day countdown to be POPIA compliant

Mar 30, 2021 | CoSec Blog

24 Mar 2021

Today marks 100 days to the deadline for public and private bodies to ensure that their processing of personal information conforms to the Protection of Personal Information Act (POPIA). In preparation for the full implementation and enforcement of POPIA on 1 July 2021, the Information Regulator (IR) has prioritised the following processes.

Consideration of applications for approval of Codes of Conduct. The Guidelines to develop Codes of Conduct as well as the standards for making and handling complaints under approved codes of conduct were gazetted on 19 February 2021 and are available on the website. This means that the IR can now receive applications for codes of conduct and those applications may be sent to codes.IR@justice.gov.za(link sends e-mail).


The IR is currently processing public comments received on the draft guidelines for registration of information officers. The Guidelines for registration of information officers will now be called Guidance Note on Information Officers and Deputy Information Officers. It is anticipated that the Guidance Note on Information Officers and Deputy Information Officers will be published on the website on or before the end of April 2021 and registration will commence on 1 May 2021. An online registration portal for registration of Information Officers will be established.

Consideration of applications for Prior Authorisation. Please note that a Guidance Note on application for Prior Authorisation was issued by the IR on 11 March 2021 and is available on the website. Accordingly, responsible parties may submit their applications for Prior Authorisation to the email address, priorauthorisationIR@justice.gov.za(link sends e-mail).


The IR is in the process of finalising the following prioritised documents:

  • Guidance Note on Exclusions and Exemptions from POPIA;
  • Template for notification of security compromises in terms of section 22 of POPIA; and
  • Guidance Note on processing of personal information across-borders.

Failure to comply with certain provisions of POPIA may result in the IR imposing an administrative penalty of up to R10 million as of 1 July 2021 or to imprisonment for a period not exceeding 10 years, or to both a fine and such imprisonment.

Issued by: 

Department of Justice and Constitutional Development


Recent Posts