POPIA and AI agents: what a small business must get right

If an AI agent answers your customers, the Protection of Personal Information Act (POPIA) applies to what it collects, stores and says. The short version: you remain responsible, the AI supplier works for you under a written contract, you tell customers what is happening, and you check where their details go. None of this needs a lawyer to understand, though your own case may need one.

We read the Act’s text on the Department of Justice website, and the Information Regulator’s own website for registration. This is general information, not legal advice. Where the law is unsettled, we say so.

Who is responsible when an AI agent handles customer details?

The Act’s definitions separate two roles. A responsible party is whoever “determines the purpose of and means for processing personal information”. An operator is “a person who processes personal information for a responsible party in terms of a contract or mandate”. When you put an AI receptionist or chatbot on your phone line or website, you are the responsible party. The company that runs it is your operator.

That matters because the duty does not move to the supplier. The Act lists accountability as the first of eight conditions for lawful processing: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation. So the duties stay with you, not with the supplier.

Do I need a contract with the AI supplier?

Yes, the Act says so in writing. Section 21 says the responsible party must ensure, through a written contract with the operator, that the operator sets up and maintains the security measures required by section 19. It also says the operator must notify the responsible party immediately if it has reasonable grounds to believe someone unauthorised got at the personal information.

Section 20 adds that an operator must process information only with the responsible party’s knowledge or authorisation, and treat what it learns as confidential. In practice that is a data processing agreement or operator agreement. Many suppliers publish one. If yours does not, ask for one before you go live.

What must I tell customers?

Section 18 asks you to take reasonably practicable steps to make the person aware of what you are collecting, who you are and where you are located, why you are collecting it, whether giving it is optional or compulsory, and what happens if they refuse. Where applicable it also covers a plan to send the information to a foreign country, and, as needed to make the processing reasonable, the person’s rights to access and correct it and to complain to the Information Regulator.

For direct collection, section 18 says those steps come before collection, unless the person already knows. For an AI agent, that means a short line at the start of the call or chat, and a fuller privacy notice on your website that the agent can point to. If the agent takes a name, number and the reason for the call, the notice should say so.

What security and breach duties apply?

Section 19 asks for “appropriate, reasonable technical and organisational measures” against loss, damage and unlawful access. You must identify reasonably foreseeable risks, set up safeguards, check regularly that they work, and keep them current.

If you have reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, section 22 says you must notify the Information Regulator and, unless you cannot identify them, the person. Notice must come as soon as reasonably possible after you discover the compromise, and the notice to the person must be in writing. So you need to know how your supplier will tell you, and who in your business acts when it does.

Can customer details go to servers outside South Africa?

Many AI models run on servers outside the country. Section 72 restricts sending personal information to a third party in a foreign country. It lists the cases where a transfer may happen. No transfer is fine just because the supplier is large or well known.

1. Adequate protection. The recipient is bound by a law, binding corporate rules or a binding agreement that gives an adequate level of protection, substantially similar to South Africa’s conditions for lawful processing, including rules on onward transfers.
2. Consent. The person consents to the transfer.
3. Contract with the person. The transfer is necessary for the performance of a contract between the person and you, or for pre-contract steps they asked for.
4. Contract in the person’s interest. The transfer is necessary to conclude or perform a contract made in their interest between you and a third party.
5. Benefit to the person. The transfer is for their benefit, getting consent is not reasonably practicable, and they would likely give it if asked.

In plain terms: the safest route is usually a binding agreement with the supplier that gives protection similar to POPIA, plus a mention in your section 18 notice. Reading a transfer as covered by the “necessary for a contract” route is a legal judgement, and a supplier’s own claims about itself do not settle it.

Does POPIA stop an AI from making decisions about customers?

Section 71 says a person may not be subject to a decision that has legal consequences for them, or affects them substantially, if it is based solely on automated processing of their personal information to build a profile. Profiles can cover work performance, creditworthiness, reliability, location, health, personal preferences or conduct.

It does not ban automation as such. Section 71(2) removes the restriction where the decision relates to a contract and the person’s request has been met or appropriate measures protect their interests, or where a law or code of conduct sets protective measures. Section 71(3) says those measures must give the person a chance to make representations and enough information about the logic behind the decision.

What this means for an owner: an agent that answers a question or offers a time slot is not obviously making that kind of decision. An agent that screens applicants, refuses credit or turns away customers on a score is closer to the line. Whether a given chatbot falls under section 71 is not something we found settled by a court or the Regulator, so take advice if yours scores or rejects people.

Can the agent send marketing messages?

Section 69 restricts direct marketing by electronic communication, including automatic calling machines, fax, SMS and e-mail. It needs the person’s consent. Without it you may market only to a customer whose details you got in a sale, for your own similar products or services, and who had a free and easy chance to object when you collected the details and in every later message. Each message must identify the sender and give a way to ask for it to stop.

A reminder about an existing booking is a different thing from a promotion, but wording can blur the two. Our guide to when you may WhatsApp a customer goes through opt-in in detail.

Do I need an Information Officer?

The Information Regulator’s website says private and public bodies must register their Information Officers on its Information Officer Portal, and that an Information Officer must start duties only after the responsible party has registered them. Section 55 sets the officer’s duties, including encouraging the body to meet the conditions for lawful processing and handling requests under the Act. Check who holds the role in your business, and register them.

What should I ask an AI supplier before I sign?

If a supplier cannot answer these in writing, that is itself an answer. When we set up an agent at Yielde, we begin in draft mode, where the agent drafts and you approve, so you see what it collects before it talks to customers on its own. See draft mode and our AI receptionist and support chatbot pages.

What is still unsettled?

• We did not find Regulator guidance that says whether a supplier running a model abroad, as your operator, counts as a “third party in a foreign country” under section 72. Cautious owners treat it as if it does.
• We did not find a court or Regulator ruling on whether a booking or support chatbot falls under section 71.
• Health details are special personal information under section 26, which also covers beliefs, race, biometrics and criminal behaviour, subject to the exceptions in section 27. A clinic or salon agent that takes health details needs advice first.
• The Act has more sections than this guide covers. We read only the ones named here.