The Protection of Personal Information Act (POPIA) is South Africa’s data protection law. This is a summary or short explanation of why it …
While the Information Regulator (IR)'s plan is to keep an eye on international developments regarding AI regulation, AI is not an immediate priority for the Information Regulator right now. Their current focus lies on amending existing legislation like POPI and [...]
There are several issues that the information regulator is aiming to address this year. Still, the two key priorities are addressing concerns around AI and automated decisions and regulating cross-border transfers of personal information. AI and automated decision-making: international data [...]
At some point, your information officer is bound to leave your organisation. It might be the default, authorised, designated, delegated or deputy information officer. These are the steps you can take if your information officer wants to resign. Your information [...]
The Information Regulator confirmed in the webinar on prior authorisation on 27 October 2021, that it will not release a list of countries with an adequate level of protection. They further said that it is for the Responsible Party to [...]
If you have determined that your organisation needs to get prior authorisation, the next question is how do you apply? Who do you send the application form for prior authorisation to? It is like applying for your license - you [...]
You need prior authorisation from the information regulator if your organisations is a responsible party that plans to do certain specified things. Note that operators don’t need get prior authorisation, only responsible parties. Do you know what role you play [...]
No, it doesn't but there are a few things to think about. POPIA does not apply to your processing of personal information that happened before it commenced on 1 July 2020. For example, if you collected personal information on 1 [...]
From 1 July 2021 the information regulator will take over the regulation of PAIA from the SAHRC.
Yes, one person can be the default or designated information officer (IO) for multiple entities or responsible parties. The regulator's portal allows you to register one person as the information officer for multiple entities. You can register multiple default or [...]
Who is responsible or accountable for offences committed under POPIA and POPIA? Who will the regulator, a court or an industry body hold accountable? Who is going to pay the fine or go to jail? These are all questions we [...]
Yes, there are a few templates you can use to appoint an information officer. Some are publicly available and others you can get from us. There are two simple templates in the guidance note on information officers and deputy information [...]
Not at the moment. But we think that some bodies should be exempt from having to register their information officer (IO). Is any body exempt from registering their information officer? Unfortunately, the guidance note on information officers and deputy information [...]
