The information regulator may issue POPIA enforcement notices from time to time. An enforcement notice (section 95) is a written recommendation of actions that the Enforcement Committee sends to the information regulator. It is similar to a ruling from an authority. The enforcement notice sets out requirements for the responsible party to do either or both of the following:
- to take specified steps within a period specified in the notice, or to refrain from taking such steps; or
- to stop processing personal information specified in the notice, or to stop processing personal information for a purpose or in a manner specified in the notice within a period specified in the notice.
We regularly monitor and report on all updates from the information regulator. It is important for anyone who processes personal data to keep on top of the outcomes from enforcement notices. That’s why, we’ve launched this page so that you receive our insights on all POPIA enforcement notices.
January 2025
Department of Basic Education enforcement action | Consent
The Information Regulator issued an enforcement notice against the Department [...]
March 2024
SAPS enforcement action | security compromise part 2
In less than 18 months, the information regulator has cracked [...]
February 2024
FT Rams Consulting enforcement notice | email direct marketing
The Information Regulator issued an enforcement notice against FT Rams [...]
January 2024
Enforcement Notice from the Information Regulator: what now?
The information regulator may send you a POPIA enforcement notice [...]
September 2023
Dis-Chem enforcement notice | data breach
The information regulator issued a Dis-Chem enforcement notice to Dis-Chem [...]