Data Protection in South Africa: Privacy Law, Rights and Compliance

📊 Intermediate ⏱ 7 hours 🎓 Certificate included

A practical course for South African organisations and their suppliers: POPIA, the Information Regulator, Information Officers, lawful processing, rights requests, security compromises, operators, transfers and direct marketing, with 2026 examples.

Enrol in this Course

  • 📦 5 modules
  • 📹 20 lessons
  • 📝 5 quizzes
  • 🎓 Certificate on completion
  • ♾ Learn at your own pace, online

Every organisation in South Africa handles personal information about customers, employees, patients, pupils or members of the public. This course explains South Africa’s data protection law in practical terms for the organisations that decide how information is used (responsible parties) and the suppliers that handle it for them (operators), such as payroll bureaus, IT and cloud providers and call centres.

It covers the Protection of Personal Information Act (POPIA), its amended Regulations, the Information Regulator’s role and related laws such as PAIA, with practical South African examples. The focus is on principles that do not change: a lawful basis before processing, transparency, minimisation, security by design, accountability with evidence, and the rights of the people the information is about.

Fines, response times and other figures are shown as 2026 examples and are expected to change. All of them are collected in a dated reference table at the end of the course. Always confirm any figure with the Information Regulator or a qualified adviser before you act.

What you will learn

  • How POPIA, PAIA and the Information Regulator fit together
  • The Information Officer’s registration and duties, prior authorisation and the accountability records to keep
  • The eight conditions, lawful grounds, special and children’s information, notices and direct marketing
  • How to handle rights requests, run impact assessments and govern data protection
  • How to secure information, respond to security compromises, manage operators and handle cross-border transfers
  • How to handle employee data, CCTV, websites and AI tools, and how complaints, enforcement and penalties work

Who it is for

Compliance officers, Information Officers and their deputies, HR, IT and security staff, marketing and customer-service staff, managers and business owners, and suppliers that process personal information for clients.

How the course works

There are five modules, each with four lessons and a short quiz. You need 70% on each quiz to complete the course and earn your certificate.

Course Curriculum

5 modules · 20 lessons · 5 quizzes · 1 free preview

Module 1: Foundations of Data Protection

Module 2: Processing Personal Data Lawfully

  • 🔒 2.1 The Data Protection Principles (Start Here)
  • 🔒 2.2 Lawful Bases and Consent
  • 🔒 2.3 Sensitive Data, Children's Data and Biometrics
  • 🔒 2.4 Privacy Notices and Direct Marketing
  • 🔒 Module 2 Quiz Enrol to take

Module 3: Rights and Governance

  • 🔒 3.1 Data Subject Rights (Start Here)
  • 🔒 3.2 Handling Rights Requests
  • 🔒 3.3 The Data Protection Officer and Governance
  • 🔒 3.4 Impact Assessments and Privacy by Design
  • 🔒 Module 3 Quiz Enrol to take

Module 4: Security, Breaches and Transfers

  • 🔒 4.1 Security Safeguards (Start Here)
  • 🔒 4.2 Personal Data Breaches
  • 🔒 4.3 Processors, Vendors and Contracts
  • 🔒 4.4 Cross-Border Transfers and Data Localisation
  • 🔒 Module 4 Quiz Enrol to take

Module 5: Data Protection in Practice

  • 🔒 5.1 Employee Data and Workplace Monitoring (Start Here)
  • 🔒 5.2 CCTV, Websites, Cookies and AI Tools
  • 🔒 5.3 Complaints, Enforcement and Penalties
  • 🔒 5.4 Building a Compliance Programme and Calendar
  • 🔒 Module 5 Quiz Enrol to take
Shopping Cart
Chat With Us
Scroll to Top