The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be published by then. We don’t know much more than this, but it is interesting that the regulator has recognised that a guidance note on this topic is necessary. We agree. This is an important part of POPIA compliance, and guidance from the regulator will be useful. You can read more about Personal Information Impact Assessment (PIIA) under POPIA.
