The South African Protection of Personal Information Act, 2013 (POPI), which protects the processing of personal information by public and private bodies, is much like similar UK and EU legislation. It was signed into law in November 2013 but is not in full effect yet. Once the Act is made effective, companies will be given a year’s grace to comply with the Act, unless this period is extended as allowed by the Act.