AI vendors based in South Africa
AI vendors based in South Africa. Subject to the Protection of Personal Information Act (POPIA), enforced by the Information Regulator, with growing regional procurement relevance.
South Africa-based AI vendors operate under the Protection of Personal Information Act (Act 4 of 2013), fully enforceable since July 2021. The Information Regulator of South Africa enforces, with administrative fines up to R10 million per violation plus criminal penalties for the most serious breaches. South Africa does not currently hold EU adequacy; transfers from the EU rely on SCCs or binding corporate rules. POPIA is one of the more mature data protection regimes on the African continent and is often used as a regional model. South Africa is also a frequent procurement gateway for sub-Saharan African markets.
Buyer considerations
- No EU adequacy decision; transfers from EU/EEA require SCCs, BCRs, or specific consent.
- Information Regulator has been actively issuing enforcement notices since 2022.
- POPIA defines an information officer role similar to a DPO; registration with the Regulator is required.
- POPIA conditions for lawful processing closely mirror GDPR principles but with South Africa-specific operational requirements.
- Cross-border transfers within Africa to non-adequate jurisdictions require contractual safeguards similar to SCCs.
Vendors headquartered in South Africa
No vendors currently match this filter.