Barracuda privacy mapping: South Africa
This guide is not legal advice, does not provide contractual guarantees, and should not be interpreted as a statement on Barracuda’s compliance with specific privacy laws. Customers should obtain advice from their own attorney.
This guide is designed to help Customers map Barracuda’s Privacy Documentation to the relevant requirements under the South Africa’s Protection of Personal Information Act (POPIA). Customers may use this guide to streamline internal assessments, validate regulatory alignment, and better understand how Barracuda’s security, privacy, and data-processing practices support customer efforts to comply with South Africa’s POPIA. Please send questions to privacy@barracuda.com.
| South Africa Privacy Requirement | Barracuda Privacy Documentation |
|---|---|
|
Notice and Consent (Sec. 9, 11 - 12, 17 - 18)
|
Barracuda provides a privacy notice, a global data processing addendum, and obtains necessary processing consent. See Barracuda privacy notice, Barracuda Global DPA (Sec. 1), and Barracuda legal page.
|
|
Processing Purpose and Limitations (Sec. 10, 13 - 16)
|
Barracuda outlines the type of data collected, the purpose of use, and limits processing to what is necessary for achieving the specified use. See Barracuda privacy notice (Sec. 1 and 2) and Barracuda Global DPA (Sec. 1 and Attachment 1).
|
|
Data Subject Rights (Sec. 5, 23 - 25)
|
Barracuda supports Data Subject’s Rights Requests (e.g. Access, deletion, correction). See Barracuda privacy notice (Sec. 6) and Barracuda Global DPA (Sec. 5).
|
|
Sub-processors (Sec. 20 - 21)
|
Sub-processors can only process data under documented instructions and must follow breach notification requirements, data subject rights, and audits. See Barracuda Global DPA (Sec. 4).
|
|
Data Protection Security (Sec. 19, 21)
|
Barracuda has security safeguards in place. ISO and SOC2 Type II Certifications are available on the Trust Center. See security certifications.
|
|
Data Breach Notifications (Sec. 22)
|
Barracuda’s incident response practices align with the local notification obligations and timeframes. See Barracuda Global DPA (Sec. 6).
|
|
Cross Border Transfers (Chapter 9)
|
Barracuda uses contractual safeguards for cross-border transfers. See Barracuda privacy notice (Sec. 7), Barracuda Global DPA (Sec. 10 and Attachment 1 - Exhibit B) and Barracuda product guides.
|
Don’t wait to get protected
Get a free consultation with a cybersecurity expert and see Barracuda's cybersecurity solutions in action.
