The Information Regulator published the "Regulations relating to the Protection of Personal Information" in the Government Gazette on 14th December 2018 42110, RG 10897, GoN 1383 (just when we were all going off on holiday.)

Regardless of the timing, in terms of Section 114 (1) of the Act, "All processing of personal information must within one year after the commencement of this section be made to conform to this Act".  In the absence of any further statements or notifications from the Regulator, we must assume that this means we will need to comply by the end of 2019.

I have attached a copy of the Regulations, which can also be downloaded from POPIA Regulations or from: 

The pressure is now on.  Contact me at This email address is being protected from spambots. You need JavaScript enabled to view it. to see how we can assist you in fast-tracking your POPIA compliance.