A closer look at PoPI compliance