Feeling overwhelmed by the Protection of Personal Information Act (what we call POPIA)?
We don’t blame you. We often get asked what the ‘minimum requirement’ is to get ready for the POPIA. Invite us over for a free 1-hour consultation.
Protection of
personal information
HERE’S HOW WE USUALLY TACKLE A POPIA PROJECT:
1. Get the lay of the land:
Do a high level risk-based gap analysis.
2. Appoint and empower:
Appoint and define the KPIs for your Information Officer and privacy champions.
3. Get your policy on:
Create (or update) your Information Governance Policy.
4. Future-proof:
Introduce a Privacy Impact Assessment to prevent new risks.
5. Educate:
Raise awareness of risky behaviour and perform training on POPIA principles, policies and procedures.
Invite us to come and talk to your team about getting your own POPIA project started.
MAYBE YOU’RE JUST WONDERING WHAT POPIA IS ALL ABOUT?
Get POPIA DIY, your 10-week POPIA action plan
The Protection of Personal Information Act will apply to all businesses in South Africa – big and small, no matter what industry you’re in. It’s not in force yet but we can help your business to get ready.
POPIA DIY for my business
THE POPIA AND THE GDPR: A COMPARISON
We highlight the key differences between the Protection of Personal Information Act and the EU General Data Protection Regulation to help you streamline your compliance programme.
The EU General Data Protection Regulation: Should South African organisations care?
Download your free copy and find out whether your organisation should be preparing for the EU GDPR, and how you can integrate those preparations with your POPIA programme.
RELATED INSIGHTS
Write policies that matter
We *heart* policies. Done well they can increase efficiency, improve teamwork, establish culture and protect everybody. Check out how we approach policies. Disclaimer: these slides are not for box tickers. And no, we don't have templates - one size fits all fits no one.
Does data minimisation spark joy?
The minimality requirement The requirement of minimality is one of the conditions for processing personal information in the Protection of Personal Information Act (POPIA). The POPIA provides that personal information can only be processed ”if, given the purpose for which it is processed, it is adequate, relevant and not excessive”. [...]
Hacks, leaks and breaches: the critical need for data privacy and regulation
Elizabeth sat down with Red And Yellow Creative School of Business to chat about all things POPI vs GDPR and data privacy in the South African context. Fortunately for us, they caught it all on camera. Enjoy. https://youtu.be/p9NIVd4WF8g