HERE’S HOW WE USUALLY TACKLE A POPIA PROJECT:
1. Get the lay of the land:
Do a high level risk-based gap analysis.
2. Appoint and empower:
Appoint and define the KPIs for your Information Officer and privacy champions.
3. Get your policy on:
Create (or update) your Information Governance Policy.
4. Future-proof:
Introduce a Privacy Impact Assessment to prevent new risks.
5. Educate:
Raise awareness of risky behaviour and perform training on POPIA principles, policies and procedures.
Invite us to come and talk to your team about getting your own POPIA project started.
RELATED INSIGHTS
The role of Information Officers
The Information Officer (IO), plays a critical role in compliance. Both the Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA) require you to appoint an Information Officer. What is an information officer? An Information...
POPIA regulations updated: What you need to know
The Information Regulator has updated the POPIA Regulations as of April 2025. They clarify compliance obligations and expand data subjects' rights. If you process personal information, these updates are not optional, they’re a roadmap for staying compliant and building trust. Here’s a breakdown of what’s changed and what it...
WHEN ASKING FOR CONSENT IS A BAD IDEA
Hear me out; you almost never need to ask for consent. Now that I've got that off my chest, here are the times when asking for consent is a bad idea. GENERAL CONSENT FOR PROCESSING PERSONAL INFORMATION I can’t tell you how often I see a...