Who is responsible for complying with data protection legislation (including the POPI Act in South Africa and the GDPR) where you process personal information together with someone else? It is crucial to know the answer to this question. It is [...]
You should map activities (rather than information, data flows, or processes) as a first step toward complying with data protection laws (such as the GDPR and the Protection of Personal Information Act (POPI Act)). The law requires larger organisations to […]
Many organisations are trying to implement POPIA. They're trying to assess the impact of POPIA on their organisation and then analyse the gap. This makes a lot of sense because you need to understand the impact and the gaps before [...]
