Quick answer: Yes, people counters are generally legal under POPIA in South Africa. Most systems, including 3D Stereo Vision counters, collect anonymous, aggregated data that does not qualify as personal information. Compliance depends on what data is collected, how it is stored, and whether customers are informed.
Foot traffic data has become one of retail's most valuable assets. Knowing how many customers enter your store, how long they stay, and how many convert to buyers gives store owners a real competitive edge. But with the Protection of Personal Information Act (POPIA) firmly in place across South Africa, many retailers are asking the same question: are people counters actually legal?
The short answer is yes, but the details matter. Here is what every South African store owner needs to know.
People counters are devices installed at store entrances to measure foot traffic. Advanced systems, like Milestone's TrueCounts 3D Foot Traffic Counter, use 3D Stereo Vision technology to deliver 95%+ accuracy across a range of metrics:
Visitor counts – measured in hourly, daily, and weekly intervals
Outside traffic – how many passers-by actually enter your store
Visit duration – average time spent in-store and staff engagement efficiency
Returning customers – tracked via MAC identification to measure customer loyalty
These metrics help store owners assess conversion rates, refine store layouts, evaluate marketing campaigns, and improve operational efficiency.
The data travels via a single Ethernet cable and is sent directly to the cloud.
POPIA, which came into full effect in July 2021, governs how businesses collect, store, and process personal information. Its core principles include:
Lawful processing – data must be collected for a legitimate purpose
Data minimisation – collect only what is necessary
Purpose specification – be clear about why data is being gathered
Consent – required when collecting personal identifiable information (PII)
Security safeguards – data must be stored and transferred securely
Retailers using people counters in South Africa can follow these best practices to maintain people counters POPIA compliance:
Data minimisation: Only collect the metrics you actually need for your business operations.
Anonymisation: Ensure returning-customer data is anonymised and not linked to any individual's identity.
Purpose specification: Document why you are collecting foot traffic data and how it will be used.
Data security: Use systems that securely transfer data. TrueCounts sends all data directly to the cloud via a single Ethernet cable, limiting exposure risk.
These steps demonstrate good faith compliance and protect both your customers and your business.
Milestone has over 28 years of experience providing shrink management solutions to more than 300 satisfied customers across South Africa, including major retailers such as Pepkor Lifestyle Group, Cape Union Mart Group, Forever New Group, and Makro.
Milestone's TrueCounts system is built with data integrity in mind. With 95%+ counting accuracy, cloud-based data transfer, and minimal infrastructure requirements, it delivers reliable insights without unnecessary data exposure.
For store owners navigating POPIA compliance in retail, that peace of mind is invaluable.
POPIA compliance retail requirements are not a barrier to using people counters. They are a framework for using them responsibly. When deployed correctly, retail foot traffic counters like TrueCounts give South African store owners powerful, actionable insights while fully respecting customer privacy.
Understand what data you collect. Anonymise where possible. Be transparent with your customers. Do that, and you can leverage people counting technology with confidence.
Ready to see how TrueCounts can work for your store?
Frequently Asked Questions
1. Do people counters collect personal information under POPIA?
Standard people counters collect anonymous, aggregated data such as visitor volumes and dwell times. This data does not identify individuals and therefore does not qualify as personal information under POPIA.
2. Is it legal to use foot traffic counters in South African retail stores?
Yes. Retail foot traffic counters in South Africa are legal under POPIA, provided the data collected is anonymous and used for legitimate business purposes. Retailers should display clear signage and follow data minimisation principles.
3. What is the difference between anonymous data and personal information under POPIA?
Personal information refers to any data that can identify a specific individual—such as a name, ID number, or contact details. Anonymous data, like aggregated visitor counts, cannot be linked to any person and therefore falls outside POPIA's scope.