Assess your POPIA readiness
Work through all eight POPIA areas. Get a personalised PDF gap report, practical actions and a prioritised working plan.
40 core controls15 to 20 minutes
FREE TO USE · FOR SOUTH AFRICAN BUSINESSESYour POPIA self-assessment.
Your POPIA self-assessment.
A clearer next step.
A free POPIA assessment for South African businesses. Review your practices or check your website, then leave with clear priorities and a practical report.
Check your public website
Automatically inspect linked privacy, terms, cookie and PAIA pages where discoverable, plus visible website foundations.
14 observed signalsSource evidence + PDF
Prefer a POPIA checklist?Use the free working checklist first. Your assessment then creates a personalised action list.
Open checklistNo account or payment needed. Both reports are free. Readiness guidance and public-page observations, not certification or a legal opinion.
FROM QUESTIONS TO PRACTICAL WORK
Get the free toolkitYour free POPIA starter toolkit.
Seven editable registers, worked examples and an implementation guide. Gather evidence, assign owners and keep the next steps clear.
01
Choose your check
Assess your business practices or review your website. Use both for a fuller starting picture.
02
Keep your report
Download your findings, practical priorities and clear limits. Email yourself a copy.
03
Choose expert help
With your permission, send your report to a named legal or web partner for a discussion.
What does the 40-question POPIA assessment cover?
01Accountability02Processing Limitation03Purpose Specification04Further Processing05Information Quality06Openness07Security Safeguards08Data Subject Participation
40 core controls across eight areas, with relevant follow-up checks. Your answers identify reported gaps, not independently verified legal compliance. Read the method
THE NEXT STEP
Your next conversation.
Advice, impact assessments, implementation, independent auditing or technical remediation. Choose a named person after reviewing your report. Sharing is always your choice.
Eugenia Barale
Lawbella
Speak directly with Eugenia Barale about your report and agree the next steps together.
Richard Thompson
Lay Law
Lay Law is a digital-first legal consultancy providing clear, practical and commercially focused legal support to founders, SMEs and in-house legal teams. Speak directly with Richard about your report and agree the next steps together.
Gareth Broekmann
LuxVibeWeb
Practical website improvements, responsive design and automation. Speak directly with Gareth about the next steps in your report.
Your chosen partner will be in touch within 48 hours after you authorise sending the report. Scope, availability and fees are agreed directly.
FROM QUESTIONS TO CLARITY
A report worth keeping.
An executive brief, eight section summaries, priority actions and every applicable finding. Keep it for your team, download your personalised action checklist or prepare a focused legal discussion.
What goes into your reportBUILD A NETWORK PEOPLE CAN TRUSTGood at putting things right?
Good at putting things right?
Let’s talk.
Give clients a useful first step with your own branded POPIA assessment and website-check links, shareable website cards, consent-based prospect follow-up and practical reports. We welcome legal and compliance, information security auditing, cybersecurity and website specialists supporting South African businesses.
Expertise, professional standing where applicable, service quality and responsible data handling are reviewed before partner approval.
Register partner interestLegal & compliance · Auditing · Cybersecurity · WebsitesApplication is free. Approval follows vetting.
KEEP AN EYE ON WHAT CHANGES
View all updatesLatest POPIA updates.
Sources last checked · Some sources unavailable; previous updates retained.
Regulator announced briefing on POPIA and PAIA enforcement matters
In a media invitation dated 26 August 2026, the Information Regulator announced a briefing scheduled for 31 August on enforcement matters, investigations and direct marketing. This is the announcement of that briefing, not a report of its outcomes.
Information Regulator · Read originalRegulator reports POPIA and PAIA enforcement notices
The Information Regulator reported issuing enforcement notices under POPIA and PAIA in its 2 June 2026 statement. The document covers accountability, information sharing and security safeguards, alongside access-to-information matters.
Information Regulator · Read originalMEDIA INVITE: POSTPONED INFORMATION REGULATOR HOSTS PROVINCIAL ROADSHOW IN EASTERN CAPE TO PROMOTE POPIA AND PAIA
From the source: The session aims to equip public and private bodies with the knowledge to implement and comply with the two legislations in their respective organisations or departments.
Information Regulator · Read originalLEARN FROM OFFICIAL ACTION
View all noticesEnforcement & infringement notices.
The latest notices collected from the Information Regulator. A notice is not necessarily a final fine or court outcome.
Regulator reports POPIA and PAIA enforcement notices
Official source notice. Read the original for the findings, requirements and any appeal provisions. Current case outcome has not been independently checked.
Information Regulator · Read originalCentral Johannesburg TVET College enforcement notice
Official source notice. Read the original for the findings, requirements and any appeal provisions. Current case outcome has not been independently checked.
Information Regulator · Read originalWhatsApp Enforcement Notice in terms of Section 95 of the Protection of Personal Information Act 4 of 2013. Regulations relating to the Protection of Personal Information 2018.[Regulation 12(2)(c)]
Official source notice. Read the original for the findings, requirements and any appeal provisions. Current case outcome has not been independently checked.
Information Regulator · Read originalBEFORE YOU START
See our assessment methodA few useful answers.
What is a POPIA self-assessment?
A structured review of the practices your business reports having in place. POPIA Check asks 40 questions across eight POPIA areas and creates a free PDF gap report with priorities and a prioritised working plan. The answers are not independently verified.
Is the assessment and full report really free?
Yes. The 40-question assessment, full PDF report and personalised action checklist are free. You do not need an account or credit card. Contact details are requested at the end to produce and email the business report. Any professional work is agreed separately with your chosen partner.
Should I use the POPIA checklist or the assessment?
Use the free working checklist to gather evidence and record owners before you start. Complete the assessment for a personalised gap report and downloadable action checklist based on your answers. You can also run the separate website review to collect public-page evidence.
Can an automatic website check confirm POPIA compliance?
No. The website review inspects a homepage and up to eight discoverable linked public pages. It looks for privacy, terms, cookie and PAIA content and visible technical signals, with source evidence. It cannot determine legal adequacy, verify internal practices or test all cookie and form behaviour.
Does the report certify POPIA compliance?
No. It records self-reported controls and possible gaps. The readiness score is not a legal compliance percentage, certification or legal opinion. POPIA Check is an independent platform, not an Information Regulator service.
Will my report automatically go to a partner?
No. Review your report first. You can then select a named legal contact for your business assessment or a web contact for your website report, and explicitly authorise sharing. The chosen partner is asked to contact you within 48 hours; professional scope and fees are agreed directly.
Practical POPIA guides
POPIA explainedWhat is POPIA? A practical business guideFree POPIA checklistFree POPIA compliance checklist for South African businessesSmall-business starting pointPOPIA for small businesses: where to startWebsite evidence guidePOPIA website check: what a scan can and cannot tell youOur assessment methodHow the POPIA Check assessment and report work
POPIA for your business
This is a self-assessment, not a legal opinion or certification. Your free results and partner referral do not require a report purchase.