Privacy Impact Assessments (PIAs) provide a foundational tool for organisations navigating the complex landscape of data protection laws, such as the General Data Protection Regulation (GDPR) in the European Union and the Protection of Personal Information Act (POPIA) in South [...]
A Personal Information Impact Assessment (PIIA) under POPIA is a process that helps organisations understand and mitigate the data protection risks to data subjects associated with processing personal information. Under South Africa’s Protection of Personal Information Act, 4 of [...]
If you want to assure regulators, stakeholders, or customers that you comply with POPIA and PAIA, what better way than to prove that you comply with the Information Regulator's own checklist (46 for POPIA and 23 for PAIA)? If you [...]
As organisations increasingly adopt artificial intelligence (AI) systems, many turn to external providers to supply these tools. But using third-party AI without proper due diligence can expose you to serious legal, ethical, and operational risks. An AI vendor impact assessment [...]
What if I told you that the Information Regulator is fond of health checks? Would you envision something as scary (to many) as a tooth extraction or blood test, or would you envision what it actually is: a POPIA Compliance [...]
