After many false starts over the years (the pandemic causing one last delay this year), the enforcement provisions of POPIA (the Protection of Personal Information Act) have finally become law. The clock is ticking on the year’s grace period allowed for compliance and every business should be aware of the substantial implications of POPIA compliance, and of the equally substantial penalties and risks associated with non-compliance. Read here for a brief overview of how “personal information” is defined, of the eight principles underlying the Act, and of the various practical issues you should know of and prepare for.