Feeling overwhelmed by the Protection of Personal Information Act (what we call POPIA)?
We don’t blame you. We often get asked what the ‘minimum requirement’ is to get ready for the POPIA. Invite us over for a free 1-hour consultation.
Protection of
personal information
HERE’S HOW WE USUALLY TACKLE A POPIA PROJECT:
1. Get the lay of the land:
Do a high level risk-based gap analysis.
2. Appoint and empower:
Appoint and define the KPIs for your Information Officer and privacy champions.
3. Get your policy on:
Create (or update) your Information Governance Policy.
4. Future-proof:
Introduce a Privacy Impact Assessment to prevent new risks.
5. Educate:
Raise awareness of risky behaviour and perform training on POPIA principles, policies and procedures.
Invite us to come and talk to your team about getting your own POPIA project started.
MAYBE YOU’RE JUST WONDERING WHAT POPIA IS ALL ABOUT?
Get POPIA DIY, your 10-week POPIA action plan
The Protection of Personal Information Act will apply to all businesses in South Africa – big and small, no matter what industry you’re in. It’s not in force yet but we can help your business to get ready.
POPIA DIY for my business
POPIA DIY for my practice
THE POPIA AND THE GDPR: A COMPARISON
We highlight the key differences between the Protection of Personal Information Act and the EU General Data Protection Regulation to help you streamline your compliance programme.
The EU General Data Protection Regulation: Should South African organisations care?
Download your free copy and find out whether your organisation should be preparing for the EU GDPR, and how you can integrate those preparations with your POPIA programme.
RELATED INSIGHTS
Why your legal and compliance teams need a #complianoscopy
Hardly a day goes by that clients don’t ask for recommendations on what new legal or regulatory technology to get to help their in-house legal or compliance teams perform better. The frequency of the question is not surprising – legal- and regtech is the hottest ticket in town. Investment in [...]
Direct marketing and the dreaded consent
Everywhere we go, we are asked the same questions. Do we really have to use the terrible, horrible, no good, very bad form 4, to get consent for direct marketing when the POPIA comes into effect? And do we then really have to get consent again from our current database? To answer [...]
Celebrate International Data Privacy Day with us!
As we celebrate International Data Privacy Day, we think back on 2018. We spent a lot of time dealing with a deluge of questions from companies wondering whether they need to comply with the GDPR, and how they can combine their efforts to comply with the POPIA and the [...]