The Protection of Personal Information Act (PoPI) in South Africa and the General Data Protection Regulation (GDPR) in the European Union, have shone a light on the importance of protecting valuable personal information.