AI Regulation Hub

South Africa

South Africa has no enacted AI Act. The draft AI Policy was withdrawn in 2026 with a credible replacement promised. Current AI compliance rests on existing law — especially POPIA — plus consumer, employment, equality, financial, healthcare and sectoral regulation.

Key provisions

National AI Policy work (in flux)

Draft

DCDT published a National AI Policy Framework in 2024 and a draft National AI Policy for public engagement. In 2026 the Minister announced withdrawal; a credible policy is to be reintroduced.

POPIA applies to AI processing personal information

In force

Where AI processes personal information, the Protection of Personal Information Act may apply: lawful processing, security, individual rights, automated-decision safeguards.

Existing-law overlays

In force

Consumer protection, employment, equality, financial services, healthcare, cybersecurity, telecommunications, intellectual-property and criminal law may apply depending on the AI use case.

Detailed overview

South Africa does not currently have a single enacted AI Act. Its AI framework is developing through policy work, public consultation, data-protection law, existing sectoral regulation and digital-economy strategy.

Policy in flux

South Africa's Department of Communications and Digital Technologies published a National Artificial Intelligence Policy Framework in 2024 and later released a draft National AI Policy for public engagement. The policy process is intended to guide South Africa's national position on AI governance, innovation, ethics, inclusion, skills, infrastructure and economic development.

In 2026, the Minister announced the withdrawal of the draft AI policy and stated that a credible policy would be reintroduced. South Africa should not be described as having a final binding AI policy or a comprehensive AI Act at this stage.

Current compliance

Current AI compliance in South Africa depends mainly on existing law. Where AI processes personal information, the Protection of Personal Information Act, or POPIA, may apply. AI systems may also be subject to consumer protection, employment, equality, financial-services, healthcare, cybersecurity, telecommunications, intellectual-property or criminal law.

Penalties

South Africa does not currently have one AI-specific penalty table. Penalties depend on the underlying legal framework that is breached, especially privacy, consumer, employment, equality, financial, healthcare, telecoms or criminal law.

Ready to launch legally?

Book a 30-minute consultation. We'll map your licensing path and tell you exactly what's required, in plain language.