Assess your POPIA readiness
Work through all eight POPIA areas. Get a personalised PDF gap report, practical actions and a prioritised working plan.
40 core controls
15 to 20 minutes
FREE TO USE · FOR SOUTH AFRICAN BUSINESSES
Your POPIA self-assessment.
Your POPIA self-assessment.
A clearer next step.
A free POPIA assessment for South African businesses. Review your practices or check your website, then leave with clear priorities and a practical report.
Check your public website
Automatically inspect linked privacy, terms, cookie and PAIA pages where discoverable, plus visible website foundations.
14 observed signals
Source evidence + PDF
Prefer a POPIA checklist?
Use the free working checklist first. Your assessment then creates a personalised action list.
Open checklist
No account or payment needed. Both reports are free. Readiness guidance and public-page observations, not certification or a legal opinion.
FROM QUESTIONS TO PRACTICAL WORK
Get the free toolkit
Your free POPIA starter toolkit.
Seven editable registers, worked examples and an implementation guide. Gather evidence, assign owners and keep the next steps clear.
Your next conversation.
Lawbella is currently our legal partner. Choose the named person after reviewing your report. Sharing is always your choice.
BUILD A NETWORK PEOPLE CAN TRUST
Good at putting things right?
Good at putting things right?
Let’s talk.
Give clients a useful first step with your own branded POPIA assessment and website-check links, shareable website cards, consent-based prospect follow-up and practical reports. We welcome legal professionals and website specialists who can turn priorities into improvements.
Expertise, professional standing where applicable, service quality and responsible data handling are reviewed before partner approval.
Register partner interest Legal · Website · Both servicesApplication is free. Approval follows vetting.
KEEP AN EYE ON WHAT CHANGES
View all updates
Latest POPIA updates.
Sources last checked · Some sources unavailable; previous updates retained.
Regulator reports POPIA and PAIA enforcement notices
The Information Regulator reported issuing enforcement notices under POPIA and PAIA in its 2 June 2026 statement. The document covers accountability, information sharing and security safeguards, alongside access-to-information matters.
Information Regulator · Read originalHealth-information processing regulations published
Regulations published on 6 March 2026 address the processing of health information by certain responsible parties. The text includes security safeguards and conditions for transferring health information outside South Africa.
Department of Justice / Government Gazette · Read originalDirect marketing guidance under POPIA
The Information Regulator published guidance on direct marketing under POPIA, covering unsolicited non-electronic and electronic communications. The guidance explains the relevant provisions and how they apply to processing personal information for marketing.
Information Regulator · Read original
BEFORE YOU START
See our assessment method
A few useful answers.
What is a POPIA self-assessment?
A structured review of the practices your business reports having in place. POPIA Check asks 40 questions across eight POPIA areas and creates a free PDF gap report with priorities and a prioritised working plan. The answers are not independently verified.
Is the assessment and full report really free?
Yes. The 40-question assessment, full PDF report and personalised action checklist are free. You do not need an account or credit card. Contact details are requested at the end to produce and email the business report. Any professional work is agreed separately with your chosen partner.
Should I use the POPIA checklist or the assessment?
Use the free working checklist to gather evidence and record owners before you start. Complete the assessment for a personalised gap report and downloadable action checklist based on your answers. You can also run the separate website review to collect public-page evidence.
Can an automatic website check confirm POPIA compliance?
No. The website review inspects a homepage and up to eight discoverable linked public pages. It looks for privacy, terms, cookie and PAIA content and visible technical signals, with source evidence. It cannot determine legal adequacy, verify internal practices or test all cookie and form behaviour.
Does the report certify POPIA compliance?
No. It records self-reported controls and possible gaps. The readiness score is not a legal compliance percentage, certification or legal opinion. POPIA Check is an independent platform, not an Information Regulator service.
Will my report automatically go to a partner?
No. Review your report first. You can then select a named legal contact for your business assessment or a web contact for your website report, and explicitly authorise sharing. The chosen partner is asked to contact you within 48 hours; professional scope and fees are agreed directly.
Practical POPIA guides
POPIA explained
What is POPIA? A practical business guide
Free POPIA checklist
Free POPIA compliance checklist for South African businesses
Small-business starting point
POPIA for small businesses: where to start
Website evidence guide
POPIA website check: what a scan can and cannot tell you
Our assessment method
How the POPIA Check assessment and report work
POPIA for your business
This is a self-assessment, not a legal opinion or certification. Your free results and partner referral do not require a report purchase.