South Africa’s Protection of Personal Information Act, 4 of 2013 is to protect personal information and ensure that the right to privacy in terms of the Constitution is upheld. Given the definition of personal information in the Act, where a post is created on a social media platform, the post’s subject will be deemed the ‘data subject’. Furthermore, the post’s creation will be deemed a ‘responsible party’. The consequences of creating a post and being considered a ‘responsible party’ means that the ‘responsible party’ must comply with specified conditions of the lawful processing of personal information, which includes social media posts.