South African (SA) organizations are increasingly exposed to data breaches and must comply with the Protection of Personal Information Act [POPIA] regarding personal information collected and processed. However, more than legislative compliance is needed to solve the information breach problem. The human behavioral element needs to be addressed by inculcating an organizational culture of privacy. The primary objective of this paper is to review research about prior organizational information privacy culture frameworks and methods to develop a SA information privacy culture leadership framework. A scoping literature review was conducted using the PRISMA-ScR methodology. The scoping review results indicate the absence of a suitable framework for South African organizations to address privacy culture. The scoping review results are building blocks for developing the conceptual organizational privacy culture leadership framework in South Africa. In addition, the framework’s components can be used for research in similar situations.