South African businesses have to comply with PoPIA and PAIA most obviously, However, for almost any business must comply with GDPR, and any company doing business in other African countries will find that they are bringing their own regulations. A strategic approach to data privacy is therefore more sensible than a piecemeal approach.