Tech & Legal Updates
Short, executive level legal and commercial updates for founders and leaders of scaling technology businesses.
POPIA sets conditions for cross-border data transfers
Under the Protection of Personal Information Act, personal information may only be transferred outside South Africa where the recipient is subject to laws, binding corporate rules, or agreements that provide an adequate level of protection.
For SaaS and technology businesses operating across jurisdictions, this places emphasis on structured data transfer mechanisms and clearly defined processor obligations. Contracts should address how personal information is transferred, processed, and protected across borders, including allocation of responsibility between parties.