Introduction The purpose of the Protection of Personal Information Act No 4 of 2013 (“POPI”) is, among other things, to promote the protection of personal information of data subjects (defined as a person to whom personal information relates), processed by private and public bodies and to establish certain conditions and minimum requirements for the processing