Regulations
(1) The Minister may, subject to section 113, make regulations relating to— (a) the establishment of the Regulator; and (b) fees referred to in section 111(1).
(2) The Regulator may, subject to section 113, make regulations relating to— (a) the manner in terms of which a data subject may object to the processing of personal information as referred to in section 11(3); (b) the manner in which a data subject may submit a request to a responsible party as referred to in section 24(1); (c) the processing of health information by certain responsible parties as referred to in section 32(6); (d) the responsibilities of information officers as referred to in section 55(1)(e); (e) the form in terms of which an application for a code of conduct must be submitted to the Regulator as referred to in section 61(1)(b); (f) the manner and form within which the data subject's consent must be requested as referred to in section 69(2) (g) the manner and form in terms of which a complaint must be submitted in terms of section 74; (h) the Regulator acting as conciliator in relation to any interference with the protection of personal information as referred to in section 76(1)(b); (i) the notification of the parties concerned of an investigation to be conducted as referred to in section 79; (j) the settlement of complaints as referred to in section 80; (k) the manner in which an assessment of the processing of personal information will be made as referred to in section 89(1); (l) the manner in terms of which the parties concerned must be informed of the developments during and result of an investigation as referred to in section 94; and (m) matters incidental to the imposition of administrative fines as referred to in section 109.
What this means for your estate
- Subsection (2) is a useful map of exactly which day-to-day mechanics get filled in by regulation rather than the Act's own text, objection procedures (11(3)), correction requests (24(1)), health information processing (32(6)), Information Officer duties (55(1)(e)), and more. When something in POPIA feels underspecified, this is often where the detail actually lives.
PopiGuard's content is kept aligned with the current POPIA Regulations, so the operational detail this section defers to is already built into your compliance workflow.