Information Officer programme

This programme is specifically designed to support Information Officers to fulfil their obligations in terms of data protection (including POPIA) and access to information (including PAIA). It is designed from the perspective of the designated or deputy Information Officer. They are a very important person because they are responsible for encouraging the protection of personal information and ensuring that their organisation processes it fairly and lawfully. The Information Officer programme is not a standalone programme. It relies on the data protection and access to information programmes.

The Information Officer also protects people’s data privacy and, therefore, their freedom, and ensures the organisation builds trust through transparency. They also ensure their organisation can commercialise data (law)fully.

We’re going to empower you – the Information Officer – to fulfil your responsibilities by doing it yourself. Know how with ongoing practical guidance.

We’re going to help you answer these questions:

• Where do I actually start?
• Who do I need to get on board?
• What practical actions do I take first?
• How do I plan?
• Where do I get guidance?
• How do I manage my organisation’s programme?

It is a demanding but exciting job, and there is a lot to do – but we’ll help you get through it. In other words, this programme helps you get the job done once you’re it.

The Information Officer has 21 key responsibilities. Some of them are to register your information officers, submit your annual PAIA report, and develop, create, monitor, maintain, update, and prepare a PAIA Manual. But there are many others. In this programme, we provide ongoing practical guidance on how to fulfil each one of them. The guidance includes webinars, Michalsons Microclasses, Michalsons Mail, tools, templates, latest updates and a community group for discussion.

Importantly, this programme includes access to both the Michalsons data protection and access to information programmes, as they provide essential insight into fulfilling your role as an Information Officer.

This programme includes a self-assessment to test the officer’s knowledge and to determine whether they can receive a certificate to verify training.

This programme is for Information Officers of both public and private bodies.

• Designated or Deputy Information Officers: Anyone appointed as a designated or deputy information officer.
• Acting Information Officers: Legal, compliance or governance professionals tasked with implementing POPIA and PAIA in the organisation.

This training is not suitable for a number of people.

• Default Information Officers: The CEO, managing director or senior executive is the default information officer by law. All organisations should have a default information officer who is registered with the Information Regulator and who is accountable and responsible for data protection and access to information compliance within their organisation. If you are this person, you should consider a strategy session.
• Your governing body or exco: It is not directly involved in the day-to-day implementation of POPIA and PAIA. They need a high-level, specific level of awareness through a briefing.
• Chief Information Officers (CIOs). They are typically not responsible for the IO duties, even though “information officer” is in their title.
• Chief Information Security Officers (CISOs). They will find our Cybersecurity Compliance Programme useful.
• Employees: People who actually process personal information (such as employees who process personal information as part of their daily duties).

• Succeed in your role by knowing where to practically start.
• Meet your responsibilities by knowing what they are and having the tools to get them done.
• Avoid the consequences of non-compliance by knowing what they are and what is expected of you.
• Prove that your information officer has been trained by having them do an assessment and get a certificate. (This is currently conducted by an interview with one of our attorneys, so there is an additional cost for the assessment and certification per information officer).
• Do the Michalsons Information officer assessment and get your Michalsons Information Officer certification.

We have looked at the role of the Information Officer and conducted webinars on Fulfilling your responsibilities as an Information Officer, run an in-person events called Michalsons Live for Information Officers and run many other events for Information Officers.

• We have coached many Information Officers through the process.
• We have presented to hundreds of Information Officers through our workshops, webinars and events.
• We have helped hundreds of Information Officers fulfil their responsibilities.