The Act replaces the repealed Data Protection Act 32 of 2018, which officially came into force in 2021, but had to be updated after facing criticism for inadequately addressing emerging data protection challenges,