HERE’S HOW WE USUALLY TACKLE A POPIA PROJECT:
1. Get the lay of the land:
Do a high level risk-based gap analysis.
2. Appoint and empower:
Appoint and define the KPIs for your Information Officer and privacy champions.
3. Get your policy on:
Create (or update) your Information Governance Policy.
4. Future-proof:
Introduce a Privacy Impact Assessment to prevent new risks.
5. Educate:
Raise awareness of risky behaviour and perform training on POPIA principles, policies and procedures.
Invite us to come and talk to your team about getting your own POPIA project started.
RELATED INSIGHTS
Rob de Rooy on comic contracts
We were fortunate to have the founder of Creative Contracts, Robert de Rooy, join us on our Plain Talk Show recently to discuss the origin story of comic contracts and how better access to information leads to more accountable employees. The origin story of comic contracts Robert...
Updated guidance on direct marketing and POPIA, part one.
At long last, the Information Regulator has published its Guidance Note on POPIA and direct marketing. We did a close reading of what it said so that you don’t have to. Here’s what you need to know. THE BIG NEWS: THE PHONE IS NOT OFF THE HOOK...
Updated guidance on direct marketing and POPIA, part two.
The Regulator’s recent Guidance Note on POPIA and direct marketing is about more than just telemarketing (we did a close read of the whole thing, which you can read in part one). So, once you’ve moved through the five stages of grief for call centres as we know them,...