Privacy Impact Assessments (PIAs) provide a foundational tool for organisations navigating the complex landscape of data protection laws, such as the General Data Protection Regulation (GDPR) in the European Union and the Protection of Personal Information Act (POPIA) in South [...]
The Information Regulator plans to draft a Guidance Note on Conducting a Personal Information Impact Assessment (PIIA). The regulator plans to develop this in their next financial year ending 31 March 2027. We assume that the guidance note will be [...]
A Personal Information Impact Assessment (PIIA) under POPIA is a process that helps organisations understand and mitigate the data protection risks to data subjects associated with processing personal information. Under South Africa’s Protection of Personal Information Act, 4 of [...]
GDPR vs POPIA. How do they compare? The key is to identify the differences and similarities between the GDPR and the POPI Act. For example, who needs to comply with them, do they both apply to the same data [...]
As organisations increasingly adopt artificial intelligence (AI) systems, many turn to external providers to supply these tools. But using third-party AI without proper due diligence can expose you to serious legal, ethical, and operational risks. An AI vendor impact assessment [...]
Shakespeare’s Sonnet 116 characterises love as a permanent and unending state, and with the rise of AI, your data will be forever memorialised. “Love is… an ever-fixed mark, that looks on tempests and is never shaken.” – William Shakespeare. We [...]
In the ever-changing and unpredictable business world, having a thorough understanding of the potential impact of disruptions on your operations is essential. Further, this understanding empowers you to plan proactively for and mitigate against disruptions. One crucial tool that plays [...]
Generative AI has revolutionised content creation across various domains, from art and music to text and images. However, this innovative technology holds immense potential but raises privacy and data protection concerns. In this post, we will explore the significance of [...]
In today’s digital age, organisations increasingly use AI systems to process large amounts of personal data. These systems can potentially transform businesses and society in profound ways. But they also pose significant risks to the rights and freedoms of data [...]
