POPI Compliance

1. Gender, race, marital status, nationality, sex, mental health, religion, belief, language – any information that can identify you as an individual person.
2. Education, financial, criminal, medical and employment history.
3. Biometrics – physical, behavior, physiological characteristics.
4. E-mail address, telephone number, location information.
5. Any correspondence of a private nature.
6. An individual’s name – if the name could lead to the reveal of information about the individual.

1. Any private or public individual who regulates or processes personal information.
2. Every company / organization must have a “Responsible Party” who is to ensure and enforce compliance with the Act.
3. Each company / organization must implement a Personal Information Policy highlighting and structuring the processing of personal information.
4. A mandate or agreement must be implemented by the Responsible Party regarding the processing of personal information.

1. The Act comes into effect of 1 July 2021.
2. Companies have until 30 June 2021 to have policies put in pace dealing with the regulation, processing and storage of personal information.

1. Potential risk of ruining your company / organizations reputation
2. Non-compliance could also result in a penalty or fine of R10 Million and / or imprisonment of up to 10 years – depending on the severity of the information breach.

• Anyone within your company / organization.
• The Information Officer can be a full-time or part-time role.

The Act stipulates 8 principles that must be complied with when processing information, namely:

1. 1. Accountability;
   2. Participation of data subject;
   3. Information quality;
   4. Openness;
   5. Processing limitation;
   6. Purpose specification; and
   7. Security safeguards.