The moment has arrived: last week the Protection of Personal Information Act (PoPIA) came into force. It hasn’t been sprung on us, the process has been ongoing and businesses have been anticipating their compliance obligations for years. PoPIA, much like the General Data Protection Regulation (GDPR) in the EU, exists to support the protection of personal information processed by public and private organisations. There are strong penalties for noncompliance. PoPIA is Live Now that the Act is live, there are several ramifications for businesses, but a few – anecdotally at least – have given executives more sleepless nights than others. Companies must allow data subjects to object to their data being processed, as well as have the right to revoke previously given consent at any time. When a c...
Sourced from Europa EU. On 1 July, the grace period for compliance with the Protection of Personal Information Act (POPIA) will come to an end. That means organisations found to be in breach of the act will be liable for fines and even criminal persecution. Given the long lead up to POPIA’s implementation, most organisations should be compliant by now. However, the flurry of activity when the European Union’s General Data Protection Regulation (GDPR) grace period came to an end in 2018 shows that this won’t necessarily be the case. And while POPIA will affect most organisations, it’s pivotal that they pay extra care when ensuring that they’re POPIA compliant. Here are five ways to do just that: Understand the data you deal with You cannot hope to adequately protect customer data in li...