Feeling overwhelmed by the Protection of Personal Information Act (what we call POPIA)?
We don’t blame you. We often get asked what the ‘minimum requirement’ is to get ready for the POPIA. Invite us over for a free 1-hour consultation.
Protection of
personal information
HERE’S HOW WE USUALLY TACKLE A POPIA PROJECT:
1. Get the lay of the land:
Do a high level risk-based gap analysis.
2. Appoint and empower:
Appoint and define the KPIs for your Information Officer and privacy champions.
3. Get your policy on:
Create (or update) your Information Governance Policy.
4. Future-proof:
Introduce a Privacy Impact Assessment to prevent new risks.
5. Educate:
Raise awareness of risky behaviour and perform training on POPIA principles, policies and procedures.
Invite us to come and talk to your team about getting your own POPIA project started.
MAYBE YOU’RE JUST WONDERING WHAT POPIA IS ALL ABOUT?
Get POPI DIY, your 10-week POPI action plan
The Protection of Personal Information Act will apply to all businesses in South Africa – big and small, no matter what industry you’re in. It’s not in force yet but we can help your business to get ready.
POPIA DIY for my business
POPIA DIY for my practice
The EU General Data Protection Regulation: Should South African organisations care?
Download your free copy and find out whether your organisation should be preparing for the EU GDPR, and how you can integrate those preparations with your POPIA programme.
What we thought about the Information Regulator’s draft regulations on Direct Marketing
The POPIA draft regulations were published in September 2017 and they have been giving direct marketers sleepless nights. We had the opportunity to make submissions to the information regulator, and this is what we said.
RELATED BLOG ENTRIES
Ethics and data protection in AI
When it comes to artificial intelligence (AI) it’s not difficult to see that we find ourselves in a time of great significance. Not only has AI magnificent potential, it is also progressing at a terrifying rate. And although we may not be the first to notice the potential of AI, [...]
Why, and what now Europe?
If you’re in the digital or data driven services industry you most probably received calls from a lot of panicky clients asking whether your service is GDPR compliant. Luckily for many South African companies, the answer would be, “no, we’re not, and we don’t have to be”. However, it is [...]
The C-word
Here at Novcon using the word ‘consent’ is pretty much like telling us you do not like our Lego ... yes, we take offence! So, we have dubbed consent the c-word, mostly because it is misunderstood and abused so often. Here’s why. Whenever someone asks me for my consent I [...]