POPIA Compliance

Last updated: July 2026

Kura Digital Foundation NPC is committed to the lawful, fair and transparent processing of personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. What Is POPIA?

POPIA is South Africa's data protection law. It sets out the conditions organisations must meet when collecting, storing, using and sharing personal information, and gives individuals rights over their own information.

2. Our Information Officer

In line with POPIA, Kura Digital Foundation has designated an Information Officer responsible for ensuring our compliance with the Act, including registration with the Information Regulator of South Africa.

Information Officer: [Name] · privacy@kura.org.za

3. The Eight Conditions for Lawful Processing

We structure our data practices around POPIA's eight conditions for lawful processing:

  • Accountability — we take responsibility for compliance across the organisation.
  • Processing limitation — we only collect information that is adequate, relevant and not excessive.
  • Purpose specification — we collect information for specific, clearly defined purposes.
  • Further processing limitation — we do not use information for purposes incompatible with why it was collected.
  • Information quality — we take reasonable steps to keep information accurate and up to date.
  • Openness — we are transparent about what we collect and why, as set out in our Privacy Policy.
  • Security safeguards — we apply reasonable technical and organisational measures to protect information.
  • Data subject participation — we enable individuals to access and correct their own information.

4. Exercising Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting our Information Officer. Full detail on your rights is available in our Privacy Policy.

5. Reporting a Concern

If you believe your information has been processed unlawfully, you are welcome to raise this with us directly. You also have the right to lodge a complaint with the Information Regulator of South Africa: