Assess your POPIA readiness
Work through all eight POPIA areas. Get a personalised PDF gap report, practical actions and a prioritised working plan.
40 core controls15 to 20 minutes
FREE TO USE · FOR SOUTH AFRICAN BUSINESSESYour POPIA self-assessment.
Your POPIA self-assessment.
A clearer next step.
A free POPIA assessment for South African businesses. Review your practices or check your website, then leave with clear priorities and a practical report.
Check your public website
Automatically inspect linked privacy, terms, cookie and PAIA pages where discoverable, plus visible website foundations.
14 observed signalsSource evidence + PDF
Prefer a POPIA checklist?Use the free working checklist first. Your assessment then creates a personalised action list.
Open checklistNo account or payment needed. Both reports are free. Readiness guidance and public-page observations, not certification or a legal opinion.
FROM QUESTIONS TO PRACTICAL WORK
Get the free toolkitYour free POPIA starter toolkit.
Seven editable registers, worked examples and an implementation guide. Gather evidence, assign owners and keep the next steps clear.
01
Choose your check
Assess your business practices or review your website. Use both for a fuller starting picture.
02
Keep your report
Download your findings, practical priorities and clear limits. Email yourself a copy.
03
Choose expert help
With your permission, send your report to a named legal or web partner for a discussion.
What does the 40-question POPIA assessment cover?
01Accountability02Processing Limitation03Purpose Specification04Further Processing05Information Quality06Openness07Security Safeguards08Data Subject Participation
40 core controls across eight areas, with relevant follow-up checks. Your answers identify reported gaps, not independently verified legal compliance. Read the method
THE NEXT STEP
Your next conversation.
A legal discussion or practical website help. Choose a named person after reviewing your report. Sharing is always your choice.
Eugenia Barale
Lawbella
Speak directly with Eugenia Barale about your report and agree the next steps together.
Gareth Broekmann
LuxVibeWeb
Practical website improvements, responsive design and automation. Speak directly with Gareth about the next steps in your report.
Your chosen partner will be in touch within 48 hours after you authorise sending the report. Scope, availability and fees are agreed directly.
FROM QUESTIONS TO CLARITY
A report worth keeping.
An executive brief, eight section summaries, priority actions and every applicable finding. Keep it for your team, download your personalised action checklist or prepare a focused legal discussion.
What goes into your reportBUILD A NETWORK PEOPLE CAN TRUSTGood at putting things right?
Good at putting things right?
Let’s talk.
Give clients a useful first step with your own branded POPIA assessment and website-check links, shareable website cards, consent-based prospect follow-up and practical reports. We welcome legal professionals and website specialists who can turn priorities into improvements.
Expertise, professional standing where applicable, service quality and responsible data handling are reviewed before partner approval.
Register partner interestLegal · Website · Both servicesApplication is free. Approval follows vetting.
KEEP AN EYE ON WHAT CHANGES
View all updatesLatest POPIA updates.
Sources last checked · Some sources unavailable; previous updates retained.
Regulator reports POPIA and PAIA enforcement notices
The Information Regulator reported issuing enforcement notices under POPIA and PAIA in its 2 June 2026 statement. The document covers accountability, information sharing and security safeguards, alongside access-to-information matters.
Information Regulator · Read originalHealth-information processing regulations published
Regulations published on 6 March 2026 address the processing of health information by certain responsible parties. The text includes security safeguards and conditions for transferring health information outside South Africa.
Department of Justice / Government Gazette · Read originalDirect marketing guidance under POPIA
The Information Regulator published guidance on direct marketing under POPIA, covering unsolicited non-electronic and electronic communications. The guidance explains the relevant provisions and how they apply to processing personal information for marketing.
Information Regulator · Read originalBEFORE YOU START
See our assessment methodA few useful answers.
What is a POPIA self-assessment?
A structured review of the practices your business reports having in place. POPIA Check asks 40 questions across eight POPIA areas and creates a free PDF gap report with priorities and a prioritised working plan. The answers are not independently verified.
Is the assessment and full report really free?
Yes. The 40-question assessment, full PDF report and personalised action checklist are free. You do not need an account or credit card. Contact details are requested at the end to produce and email the business report. Any professional work is agreed separately with your chosen partner.
Should I use the POPIA checklist or the assessment?
Use the free working checklist to gather evidence and record owners before you start. Complete the assessment for a personalised gap report and downloadable action checklist based on your answers. You can also run the separate website review to collect public-page evidence.
Can an automatic website check confirm POPIA compliance?
No. The website review inspects a homepage and up to eight discoverable linked public pages. It looks for privacy, terms, cookie and PAIA content and visible technical signals, with source evidence. It cannot determine legal adequacy, verify internal practices or test all cookie and form behaviour.
Does the report certify POPIA compliance?
No. It records self-reported controls and possible gaps. The readiness score is not a legal compliance percentage, certification or legal opinion. POPIA Check is an independent platform, not an Information Regulator service.
Will my report automatically go to a partner?
No. Review your report first. You can then select a named legal contact for your business assessment or a web contact for your website report, and explicitly authorise sharing. The chosen partner is asked to contact you within 48 hours; professional scope and fees are agreed directly.
Practical POPIA guides
POPIA explainedWhat is POPIA? A practical business guideFree POPIA checklistFree POPIA compliance checklist for South African businessesSmall-business starting pointPOPIA for small businesses: where to startWebsite evidence guidePOPIA website check: what a scan can and cannot tell youOur assessment methodHow the POPIA Check assessment and report work
POPIA for your business
This is a self-assessment, not a legal opinion or certification. Your free results and partner referral do not require a report purchase.