
POPIA is no longer a big-business problem: What SMEs need to know in 2026
For the first few years since the Protection of Personal Information Act 4 of 2013 (“POPIA”) became fully enforceable on 1 July 2021, most SMEs have treated POPIA compliance as something for banks, big corporates and government departments to worry about.
That is no longer a safe assumption.