The Gauteng Gambling Board (“GGB”) is required to comply with the Protection of Personal Information Act  No. 4 of 2013 (“POPIA“). POPIA is a data protection legislation in South Africa that was created to, among other things, control how personal information (being any personally identifiable information) can be obtained, used and shared (i.e. ‘processed’ – being any operation or activity or any set of operations). As of 1 July 2021, POPIA is fully effective and enforceable and, as such, GGB is required to comply with its provisions whenever it processes personal information of data subjects – a data subject is any person to whom personal information relates. This can be both natural and juristic persons. For purposes of GGB, and by way of example, this includes licensees (including prospective licenses), service providers, and other stakeholders.