No, doxxing—releasing private personal information without consent—is illegal in South Africa under multiple statutes. The Protection of Personal Information Act (POPIA) and the Cybercrimes Act criminalize unauthorized disclosure of personal data, with penalties up to R10 million or 10 years imprisonment. Courts have increasingly enforced these provisions against digital harassment cases.
Key Regulations for Doxxing in South Africa
- POPIA (Act 4 of 2013): Prohibits processing personal information without lawful purpose, including sharing data like home addresses or ID numbers without consent. The Information Regulator enforces compliance, issuing fines for breaches.
- Cybercrimes Act (Act 19 of 2020): Criminalizes the disclosure of “malicious electronic communications” intended to cause harm, including doxxing. Section 5(1) targets acts that incite violence or harassment, with SAPS investigating complaints.
- Common Law & Harassment Orders: Victims may seek interdicts under the Prevention of Harassment Act (2011) or delictual claims for emotional damages. High-profile cases, such as H v F (2023), set precedents for digital privacy protections.
Enforcement remains inconsistent due to resource constraints, but the 2026 POPIA amendments strengthen penalties for repeat offenders. Platforms hosting doxxed content face liability under Section 77 of the Cybercrimes Act if they fail to remove material expeditiously. Legal recourse demands swift reporting to the SAPS Cybercrime Unit or the Information Regulator.