Protection of Personal Information Act
in forcePOPIA governs personal-data processing, accountability, security, individual rights and automated decision-making relevant to AI systems.
South Africa does not have a comprehensive national AI-specific law in force. AI systems remain governed by the Protection of Personal Information Act, consumer, equality, competition, employment and sector rules. The 2024 National AI Policy Framework is directional and nonbinding. The draft National AI Policy published in April 2026 was formally withdrawn in May and is not current policy, pending legislation or binding law.
POPIA governs personal-data processing, accountability, security, individual rights and automated decision-making relevant to AI systems.
The framework sets policy directions for responsible AI, skills, infrastructure, research, public-sector adoption and governance.
The forum coordinates AI policy development across government, industry, academia and civil society.
The April 2026 draft was formally withdrawn in May. It is retained as a historical record and does not state the current national position.
No. Existing data protection, consumer, equality, competition, employment and sector rules govern AI systems.
No. The government formally withdrew the draft after publication. It is not pending legislation, current policy or binding law.
The 2024 National AI Policy Framework remains a nonbinding directional document, supported by an active national stakeholder process.
POPIA is central where AI systems process personal information or make significant automated decisions, with other horizontal and sector rules applying by use case.
Get an answer grounded in this baseline and the wider Nomos catalogue.