South Africa
South Africa is at the policy stage. A draft National AI Policy published for comment in 2026 sets pillars including responsible governance and rights-based, risk-based regulation, building on a 2024 discussion document, but the government has not yet proposed AI legislation. The Protection of Personal Information Act is the binding instrument AI systems meet today.
Key points
- Draft National AI Policy (2026) is out for comment; it signals rights-based, risk-based regulation without yet proposing a statute.
- The April 2024 AI planning discussion document started the formal policy process.
- POPIA binds AI systems processing personal information, under the Information Regulator.
Laws and instruments
Protection of Personal Information Act (applied to AI)
South Africa's data protection statute governs AI systems processing personal information, including automated decision-making provisions.
Draft National AI Policy
Draft policy framework with pillars on responsible governance, ethical and inclusive AI, and regulatory alignment. Policy, not legislation.
Timeline
- July 2021POPIA fully effective.
- April 2024AI planning discussion document published.
- 2026Draft National AI Policy released for public comment.
Who it applies to
No AI-specific duties. POPIA applies to AI systems handling personal information, including its automated decision-making rules.
Penalties
POPIA enforcement by the Information Regulator, including fines and, for some offenses, criminal liability.
Common questions
Does South Africa have a comprehensive AI law?
What are the penalties for AI violations in South Africa?
Who does AI regulation in South Africa apply to?
Artificial Intelligence Regulations, "AI Regulation in South Africa," reviewed July 16, 2026, https://artificialintelligenceregulations.com/jurisdictions/south-africa.html.
Entries state the position as of the review date and link to the primary text for verification.