South Africa’s data protection authority, the Information Regulator, published the final draft of the Protection of Personal Information Act (POPIA) regulations in December 2018. Those regulations will be finalized sometime in 2019, which, according to Section 114 of the POPIA “provides that once the law is fully implemented, its substantive provisions will become enforceable after a one-year transitional period. So, to the extent that the POPIA Regulations are finalized at some point in 2019, its substantive provisions will become enforceable one year later in 2020.”