POPI WHO?

POPI ACT

The much-anticipated Protection of Personal Information Act of 2013 (POPI Act), commenced on 1 July 2020. It requires all businesses (including employers), that process personal information, to ensure that the necessary measures are in place to implement, prove and monitor compliance by 30 June 2021.

POPIA COMPLIANCE ROAD MAP

1. Formalise your POPIA compliance project  
2. Appoint an Information Officer (Legal requirement –  Default is highest ranking officer)
3. Perform a gap analysis versus the ACT (POPIA)
4. Analyse what and how Personal Information is processed (status quo)
5. Review / draft POPIA compliance policies based on findings
6. Review your websites & online platforms
7. Update / create your PAIA manual
8. Implement POPIA compliant PI management processes
9. Train internal stakeholders on their roles in POPIA compliance
10. Adopt POPIA compliance as “Business-As-Usual”
11. Information security Safeguards