Amendments to POPIA Regulations and Mandatory e-Portal Reporting

Posted 28 May 2025 Written by Acts Online
Category Regulatory Compliance

Brought to you by SA Accounting Academy: The Information Regulator has issued significant amendments to the Regulations under the Protection of Personal Information Act, No. 4 of 2013 (POPIA), which mandate the use of a digital e-Portal for reporting security compromises.

The amendments to the Regulations under the Protection of Personal Information Act, No. 4 of 2013 are scheduled to come into effect on 17 April 2025. These changes are designed to provide data subjects with more robust options to enforce their rights and to modernise the interaction between responsible parties and the Information Regulator.

A critical component of these amendments is the formalisation of the Information Regulator’s e-Portal. As of 1 April 2025, the portal is deemed a mandatory reporting tool for both private and public organisations. This replaces previous informal or manual notification methods for security compromises (data breaches) as required under section 22 of the Act.

Key Takeaways for Compliance

  • Mandatory e-Portal: All organisations must use the online portal for reporting security compromises starting 1 April 2025.
  • Data Subject Rights: The amendments introduce refined procedures for data subjects to exercise and enforce their rights under POPIA.
  • Effective Date: While portal usage is mandatory from 1 April, the broader regulatory amendments take effect on 17 April 2025.

Click here to download the 7-page summary document.

What this means for you, your business, or your clients

  • For yourself: No direct individual obligations; impact is channelled through professional advisory duties and firm-level compliance regarding data protection.
  • For your business: You must update your internal data breach response protocols to ensure all notifications are submitted via the Information Regulator’s e-Portal from 1 April 2025.
  • For your clients: Advise clients to review their data subject participation procedures to ensure compliance with the amended enforcement options effective 17 April 2025.

Originally published at https://accountingacademy.co.za/news/read/cdh-popia-amendments-summary

The views expressed herein are those of the author and do not necessarily reflect those of Acts Online. Acts Online accepts no responsibility for the accuracy, completeness or fairness of the article, nor does the information contained herein constitute advice, legal or otherwise.