South Africa's data protection law, the POPI Act, was influenced by the EU's Data Protection Directive. With the EU's new GDPR in place since 2018, the question is whether the POPI Act still meets international data protection standards. This article compares the GDPR with the POPI Act to see if changes are needed.