FREE TO USE · FOR SOUTH AFRICAN BUSINESSES

Your POPIA self-assessment.
A clearer next step.

A free POPIA assessment for South African businesses. Review your practices or check your website, then leave with clear priorities and a practical report.

01 · YOUR BUSINESS

Assess your POPIA readiness

Work through all eight POPIA areas. Get a personalised PDF gap report, practical actions and a prioritised working plan.

40 core controls 15 to 20 minutes
Start free assessment Sample report
02 · YOUR WEBSITE

Check your public website

Automatically inspect linked privacy, terms, cookie and PAIA pages where discoverable, plus visible website foundations.

14 observed signals Source evidence + PDF
Check my website Sample report
Prefer a POPIA checklist? Use the free working checklist first. Your assessment then creates a personalised action list.
Open checklist

No account or payment needed. Both reports are free. Readiness guidance and public-page observations, not certification or a legal opinion.

FROM QUESTIONS TO PRACTICAL WORK

Your free POPIA starter toolkit.

Seven editable registers, worked examples and an implementation guide. Gather evidence, assign owners and keep the next steps clear.

Get the free toolkit

Your next conversation.

Lawbella is currently our legal partner. Choose the named person after reviewing your report. Sharing is always your choice.

BUILD A NETWORK PEOPLE CAN TRUST

Good at putting things right?
Let’s talk.

Give clients a useful first step with your own branded POPIA assessment and website-check links, shareable website cards, consent-based prospect follow-up and practical reports. We welcome legal and compliance, information security auditing, cybersecurity and website specialists supporting South African businesses.

Expertise, professional standing where applicable, service quality and responsible data handling are reviewed before partner approval.

Register partner interest Legal & compliance · Auditing · Cybersecurity · Websites
Application is free. Approval follows vetting.
KEEP AN EYE ON WHAT CHANGES

Latest POPIA updates.

View all updates

Sources last checked · Some sources unavailable; previous updates retained.

Enforcement

INFRINGEMENT NOTICE (In terms of section 109(1) of the Protection of Personal Information Act No 4 of 2013)

From the source: The Information Regulator (“Regulator”) has - (i)made a determination that the CJC has failed to comply with the Enforcement Notice served to it in terms of section 95 of the Protection of Personal Information Act No 4 of 2013 (POPIA) and has thereby contravened section 103 of POPIA; (ii)(ii) decided to issue this Infringement Notice to the infringer as contemplated under section 109 (1) of POPIA.

Information Regulator · Read original
BEFORE YOU START

A few useful answers.

See our assessment method
What is a POPIA self-assessment?

A structured review of the practices your business reports having in place. POPIA Check asks 40 questions across eight POPIA areas and creates a free PDF gap report with priorities and a prioritised working plan. The answers are not independently verified.

Is the assessment and full report really free?

Yes. The 40-question assessment, full PDF report and personalised action checklist are free. You do not need an account or credit card. Contact details are requested at the end to produce and email the business report. Any professional work is agreed separately with your chosen partner.

Should I use the POPIA checklist or the assessment?

Use the free working checklist to gather evidence and record owners before you start. Complete the assessment for a personalised gap report and downloadable action checklist based on your answers. You can also run the separate website review to collect public-page evidence.

Can an automatic website check confirm POPIA compliance?

No. The website review inspects a homepage and up to eight discoverable linked public pages. It looks for privacy, terms, cookie and PAIA content and visible technical signals, with source evidence. It cannot determine legal adequacy, verify internal practices or test all cookie and form behaviour.

Does the report certify POPIA compliance?

No. It records self-reported controls and possible gaps. The readiness score is not a legal compliance percentage, certification or legal opinion. POPIA Check is an independent platform, not an Information Regulator service.

Will my report automatically go to a partner?

No. Review your report first. You can then select a named legal contact for your business assessment or a web contact for your website report, and explicitly authorise sharing. The chosen partner is asked to contact you within 48 hours; professional scope and fees are agreed directly.

Practical POPIA guides

POPIA explained What is POPIA? A practical business guide Free POPIA checklist Free POPIA compliance checklist for South African businesses Small-business starting point POPIA for small businesses: where to start Website evidence guide POPIA website check: what a scan can and cannot tell you Our assessment method How the POPIA Check assessment and report work

POPIA for your business

Estate agencies POPIA for estate agents: a practical privacy checklist Recruitment agencies POPIA for recruitment agencies: candidate data checklist Online shops POPIA for online shops: checkout, cookies and customer data

This is a self-assessment, not a legal opinion or certification. Your free results and partner referral do not require a report purchase.