Ten steps to Protection of Personal Information Act Compliance

Article provided by Bidvest Waltons

It is widely expected that the long-awaited Information Regulator will be appointed during the next few months. When that happens, the Protection of Personal Information Act (No. 4 of 2013) (POPI) Act will start to come into force. That means almost all organisations in South Africa will soon be faced with the challenge of achieving and maintaining compliance with the POPI Act. This handy guide provides a proven step-by-step, ten point approach to compliance.

1. Formalise your POPI Act compliance project.
2. Appoint an Information Officer.
3. Perform a gap analysis versus the POPI Act.
4. Analyse what and how Personal Information is processed.
5. Implement POPI Act compliance policies.
6. Review your websites.
7. Plan for secure and economical document destruction.
8. Implement POPI compliant PI management processes.
9. Train stakeholders about their roles in POPI Act compliance.
10. Make POPI Act compliance ‘business-as-usual’.

Bidvest Waltons is a proud partner of the National Small Business Chamber (NSBC).