POPIA gives effect to the constitutional right to privacy including the free flow of information within South Africa and across international borders.' In a world where data privacy should be the norm, why do we need to legislate it?