An Assessment of POPIA Compliance in Case 1 Municipal Fresh Produce Market

From July 2021, organisations responsible for the collection, processing, storage and transmission of personal information within South Africa (SA), are required to comply with the Protection of Personal Information Act 4 of 2013 (POPIA), which is a law drafted to regulate the processing of personal information in South Africa. Its provisions include but are not limited to the use of personal information for marketing purposes. While it was announced that enforcement of the law would commence in July 2021, many organisations are still in the process of reorganising themselves to comply with this important piece of legislation. This paper reports on a document analysis process testing POPIA compliance on Case 1, one of the four largest Municipal Fresh-Produce Markets within one of SA's metropolitan municipalities. The document analysis found low levels of compliance to POPIA within the Case 1 fresh-produce market.