A 35-point POPIA self-audit. Score your business in twenty minutes and see exactly what's missing. Free.

Where does your business actually stand under POPIA?

Not "do you have a policy" — do you have the evidence. This is a thirty-five point self-audit across the ten areas the Information Regulator looks at: your Information Officer and whether they're registered, your PAIA manual, what personal information you actually hold, your lawful basis for holding it, privacy notices, security safeguards, operator contracts, cross-border transfers, breach response, data subject rights, direct marketing under section 69, and whether you could prove any of it tomorrow.

Score each statement 2, 1 or 0. Total it out of 70. Read it against four honest bands — and then work the five priority fixes, in order, with a realistic estimate of what each one takes.

What you get

35 scored checkpoints across 10 areas, each referenced to the section of the Act it comes from. A scoring sheet and four interpretation bands. The first five fixes, in priority order, with time estimates. Three things people commonly get wrong — and why each is expensive.

Written for owners and managers, not lawyers. Seven pages. Twenty minutes.

By downloading you'll join the Sovereignty by Char update list — practical compliance updates and product news, unsubscribe anytime.

Free educational self-assessment. Not legal advice, not a compliance certificate, and no legal standing with the Information Regulator or any other party. Independent publication — not affiliated with, endorsed by, or acting on behalf of the Information Regulator (South Africa). Legislation and regulator guidance change; verify the position before relying on it.