Is your business POPIA-compliant? Find out in 5 minutes.

The Protection of Personal Information Act applies to every business in South Africa that handles personal information; customers, staff, or suppliers. Answer 12 questions honestly to see where you stand and exactly what to fix first.

12 questions No sign-up Nothing leaves your browser Printable action report

What non-compliance can cost you

R10 million

Maximum administrative fine the Information Regulator can impose per breach of POPIA (s109).

10 years

Maximum imprisonment for serious POPIA offences, including ignoring an enforcement notice.

R5 million

Fine issued to the Department of Justice in 2023 after a ransomware breach, the Regulator enforces, even against the state.

Civil claims

Affected people can sue you for damages under s99; without having to prove intent or negligence.