POPIA grace period limits regulator’s fines
South Africa's Information Regulator has identified the grace period provisions in POPIA (Protection of Personal Information Act) as a significant weakness that limits the regulator's ability to impose fines on public bodies for non-compliance. The grace period allows public institutions extended timelines to achieve compliance before facing financial penalties.
Source: ITWeb