POPIA in South Africa: consent, operators, and accountable processing
POPIA puts a premium on responsible parties, operator agreements, and conditions for processing. Consent is only one of several paths.
The Protection of Personal Information Act requires a lawful justification, including consent, contract, legal obligation, or legitimate interest of the responsible party or a third party — with conditions.
Direct marketing by electronic means generally needs opt-in after a first approach. That is a classic CMP use case.
Operators and evidence
If vendors process on your behalf, operator agreements must match the purposes you actually enable in the SDK. Consent records help you show the Information Regulator what was authorized.
Educational overview only — not legal advice. Confirm requirements with counsel for your products and markets.
