No matter what kind of company you run, public, private, non-profit, any other, you’ve surely heard of the new privacy law, the Protection of Personal Information Act (POPIA or POPI Act). While the POPI Act became effective as of July 2020, you have 12 months to full compliance, i.e. June 30, 2021. Action can only be taken against non-compliant parties in the form of hefty penalties of upto R 10 Million, few small- to medium-sized businesses can afford. Additionally, the CEOs or Directors may go to prison.