A POPIA manual is actually a privacy policy. Many organisations have compiled or published a POPIA Manual, and we often receive enquiries requesting that we draft one for clients or provide a POPIA Manual template. Some people incorrectly think [...]
GDPR vs POPIA. How do they compare? The key is to identify the differences and similarities between the GDPR and the POPI Act. For example, who needs to comply with them, do they both apply to the same data [...]
Get a password manager to improve your security. You have signed up for a new service, and they ask you to create a password. The thought of having to create a new password is a nightmare for you. You ask [...]
The information regulator published a Guideline on notification of security compromises to the information regulator in July 2020. The guideline explains the procedure responsible parties or information officers should follow to notify the regulator of a security compromise or data [...]
ICT is an acronym for "information, communications and technology". Many people ask, 'What is ICT?' What is the meaning or definition of ICT? The acronym ICT is frequently used in various contexts. For example, people refer to the ICT industry, [...]
As a lawyer, I’ve encountered many policies over many years. I’ve read, reviewed, interpreted, and drafted them. I now realise that they were almost all horrible. I’ve seen the light and woken up to a whole new world. The light [...]
For many, a data protection standard is the holy grail in assisting them to comply with data protection laws. Data protection standards often provide practical, actionable controls (almost a checklist) that they can implement to protect data and, therefore, comply [...]
The regulator has issued a guidance note on direct marketing as regulated by section 69 of POPIA. The regulator has noted on many occasions that it has received an increasing number of complaints about the processing of personal information in [...]
The information regulator briefed the public and the media on 11 September 2024 on some enforcement activities over the last quarter (since 1 April 2024). The central theme was that the regulator has taken various enforcement actions but hasn't succeeded [...]
The grace period for your organisation to comply with the Protection of Personal Information Act (POPI Act or POPIA) ended on 1 July 2021. Just so you know, you have to comply now. What action does your organisation need [...]
What is a MOI? The term "MOI" is an abbreviation for “Memorandum of Incorporation”. It is a document that sets out the rights, duties and responsibilities of shareholders, directors and other persons involved in a company. Every company registered in [...]
There is a new Biden executive order on American sensitive personal data that protects American citizens from exploitation by countries of concern. It relates to sensitive personal data or information. It authorises the Attorney General to prevent the large-scale transfer [...]
