Data protection law in South Africa: registration and research permits
What a survey team needs to know about personal data and survey authorization in South Africa.
Summary for planning; confirm requirements with the regulator before fieldwork.
operational regulator
Data protection law
Protection of Personal Information Act 4 of 2013 (POPIA) (2013)
Regulator
Registration
registration of information officers required; deputy information officers for research bodies
Survey permits
Stats SA accreditation required for research access; ethical clearance via research ethics bodies
National statistics office
Note
POPIA fully in force since July 2021.
South Africa research rules: common questions
Is there a data protection law in South Africa?
Protection of Personal Information Act 4 of 2013 (POPIA) (2013).
Who regulates personal data in South Africa?
Information Regulator (South Africa).
Do I need to register to collect personal data in South Africa?
Registration of information officers required; deputy information officers for research bodies.
Do I need a permit to run a survey in South Africa?
Stats SA accreditation required for research access; ethical clearance via research ethics bodies.
Sources: the regulator and statistics office pages linked above, retrieved 10 Oct 2026. See our methods.