The media, press or journalists process lots of personal information when they gather, report on, and publish the news. They have a responsibility to protect it. For example, a journalist might know information relating to the education or the medical, financial, criminal or employment history of a person. Think about the story on Dr Pallo Jordan. They might also know the HIV status of a person. Often this personal information is private and not publicly known. Sometimes personal information is used to get to the bottom of a story only for it to be published without the personal information itself being published.

What does the law require from the media?

Journalists need to have access to personal information to do their jobs. But what are their responsibilities when it comes to that personal information? The main responsibility is to ensure that the personal information does not fall into the wrong hands and get used to cause harm to the data subject. The Press Code is very important in this regard. Many publications subscribe to it. It requires their journalists to strive to always avoid unnecessary harm.

With the emergence of the Protection of Personal Information (the POPI Act), however, a new twist was added to the tale. The focus shifted to whether journalists must comply with both POPI or just the Press Code. In fact, the discussion did not end there. Another question which lawyers and journalists alike, began asking was: If both apply, what happens if there is a conflict between the two?

The journalistic exclusion in POPI

POPI does not apply when someone processes personal information solely for the purpose of journalistic, literary or artistic expression. But this is not an automatic blanket exclusion – there are limits on it. If you intend relying on this exclusion, you must be careful. You need to balance the right to privacy and the right to freedom of expression. The public interest is also important. It means that the information must be of a legitimate interest or importance to citizens.

This is not your get out of jail free card

There is also another exclusion. POPI does not apply when someone processes personal information:

  1. for exclusively journalistic purposes, and
  2. is bound by a code of ethics that adequately protects personal information.

In this case, the code of ethics applies to the exclusion of POPI. POPI is not relevant in this case.

Questions that arise?

But there are many questions:

  1. What is the difference between the two exclusions?
  2. Is there a difference between the “purpose of journalistic expression” and “journalistic purposes”?
  3. Is the Press Code a code of ethics that adequately protects personal information?
  4. What does the Press Code require a media house to do to protect personal information?
  5. When does a media house process for a purpose other than journalism? For example, employing their employees, marketing their publications.
  6. What does POPI require a media house to do to protect personal information when its activity is for a purpose other than journalism.
  7. Who is someone? Does it include citizen bloggers, or non-media organisations?

How we can help?

We can:

Interested in POPI and the media?


If you are interested, please complete the form on the right or enquire now. We will contact you to find out more about your requirements and give you a quote.