POPIA doesn't pause for AI.
Pasting personal information into an AI tool is processing under POPIA. The same conditions apply as to any other system.
Lawful purpose
Ask 01
Is this use compatible with why you collected the information?
DEFAULT
If not, don't paste it.
Security safeguards
Ask 02
Is the tool approved, secured and covered by the right terms?
DEFAULT
Approved tools only.
Cross-border transfer
Ask 03
Where is the data processed? Section 72 sets rules for sending it outside South Africa.
DEFAULT
Know where it goes.
Special information
Ask 04
Health, religion, biometrics, criminal records and more carry extra restrictions.
DEFAULT
Keep it out.
Sources: POPIA ↗ · POPIA ↗ · POPIA ↗
Same law. New tool. Write it down.