• The Protection of Personal Information Act (POPIA) [No.4 of 2013] is the first comprehensive data protection regulation to be passed in South Africa and it gives effect to the right to informational privacy derived from the constitutional right to privacy. • It is due to come into force in 2020, and seeks to regulate the processing of personal information in South Africa, regulate the flow of personal information across South Africa’s borders, and ensure that any limitations on the right to privacy are justified and aimed at protecting other important rights and interests. • Although it was not drafted with health research in mind, POPIA will have an impact on the sharing of health data for research, in particular biorepositories. • It is now timely to consider the impact of POPIA on biorepositories, and the necessary changes to their access and sharing arrangements prior to POPIA coming into force.

中文翻译：

---

2013 年个人信息保护法和南非健康研究数据保护

• 个人信息保护法 (POPIA) [2013 年第 4 号] 是南非通过的第一个全面的数据保护法规，它使源自宪法隐私权的信息隐私权生效。• 将于 2020 年生效，旨在规范南非对个人信息的处理，规范跨越南非边界的个人信息流动，并确保对隐私权的任何限制都是合理的，旨在保护其他重要权益。• 尽管在起草时并未考虑到健康研究，但 POPIA 将对用于研究的健康数据共享产生影响，尤其是生物储存库。• 现在是时候考虑 POPIA 对生物样本库的影响，